CVE

Id
26611  
CVE No.
CVE-2007-3254  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before 5.0.25.8, and 6.x before 6.0.46.1, allow remote authenticated users to inject arbitrary web script or HTML via (1) a saved Workflow name; (2) a Workflow name, related to deletion of a Workflow template; (3) the Content-Type HTTP header; or (4) the name of an uploaded file. NOTE: items 3 and 4 also affect the same version numbers of Xythos Digital Locker (XDL). Some or all vectors might also affect Xythos WebFile Server.  
Phase
Assigned (20070619)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
270184 26611 CVE-2007-3254 BUGTRAQ:20070622 SYMSA-2007-004: Multiple Vulnerabilities in Xythos Server Products  View
270185 26611 CVE-2007-3254 URL:http://www.securityfocus.com/archive/1/archive/1/472275/100/0/threaded  View
270186 26611 CVE-2007-3254 MISC:http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-004.txt  View
270187 26611 CVE-2007-3254 BID:24521  View
270188 26611 CVE-2007-3254 URL:http://www.securityfocus.com/bid/24521  View
270189 26611 CVE-2007-3254 OSVDB:37621  View
270190 26611 CVE-2007-3254 URL:http://osvdb.org/37621  View
270191 26611 CVE-2007-3254 OSVDB:37622  View
270192 26611 CVE-2007-3254 URL:http://osvdb.org/37622  View
270193 26611 CVE-2007-3254 OSVDB:37623  View
270194 26611 CVE-2007-3254 URL:http://osvdb.org/37623  View
270195 26611 CVE-2007-3254 OSVDB:37624  View
270196 26611 CVE-2007-3254 URL:http://osvdb.org/37624  View
270197 26611 CVE-2007-3254 SECTRACK:1018291  View
270198 26611 CVE-2007-3254 URL:http://securitytracker.com/id?1018291  View
270199 26611 CVE-2007-3254 SECTRACK:1018292  View
270200 26611 CVE-2007-3254 URL:http://securitytracker.com/id?1018292  View
270201 26611 CVE-2007-3254 SECUNIA:25783  View
270202 26611 CVE-2007-3254 URL:http://secunia.com/advisories/25783  View
270203 26611 CVE-2007-3254 SREASON:2845  View
270204 26611 CVE-2007-3254 URL:http://securityreason.com/securityalert/2845  View
270205 26611 CVE-2007-3254 XF:xedm-multiple-xss(35083)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57012 JVNDB-2007-005704 XEDM などにおけるマルウェアを配布するドキュメントと任意の Content-Type HTTP ヘッダを関連づけられる脆弱性 Xythos Enterprise Document Manager (XEDM)、Digital Locker (XDL)、および WebFile Server には、マルウェアを配布するドキュメントと任意の Content-Type HTTP ヘッダを関連づけられる脆弱性が存在します。 CVE-2007-3256 26611 4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005704.html  View