Bugtraq mailing list archives
XEROX DocuShare URL XSS Injection Vulnerabilities
From: DoZ () HackersCenter com
Date: 29 May 2008 19:44:30 -0000
XEROX DocuShare URL XSS Injection Vulnerabilities Xerox DocuShare is a flexible Web-based content management solution that brings greater productivity to every knowledge worker. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Hackers Center Security Group (http://www.hackerscenter.com) Credit: Doz Class: Cross Site Scripting Remote: Yes Product: DocuShare Vendor: http://docushare.xerox.com/ Version: 6 & Previous Attackers can exploit these issues via a web client. http://docushare.site.com/dsdn/dsweb/SearchResults/XSS http://docushare.site.com/dsdn/dsweb/Services/User-XSS http://docushare.site.com/docushare/dsweb/ServicesLib/Group-#/XSS Google Dork: DocuShare Login
Current thread:
- XEROX DocuShare URL XSS Injection Vulnerabilities DoZ (May 29)