CVE

Id
35342  
CVE No.
CVE-2008-5225  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under (1) SearchResults/ and (2) Services/ in dsdn/dsweb/, and (3) the default URI under unspecified docushare/dsweb/ServicesLib/Group-#/ directories.  
Phase
Assigned (20081125)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
387304 35342 CVE-2008-5225 BUGTRAQ:20080529 XEROX DocuShare URL XSS Injection Vulnerabilities  View
387305 35342 CVE-2008-5225 URL:http://www.securityfocus.com/archive/1/archive/1/492766/100/0/threaded  View
387306 35342 CVE-2008-5225 BUGTRAQ:20080603 Advisory: Xerox Workaround & planned patch  View
387307 35342 CVE-2008-5225 URL:http://www.securityfocus.com/archive/1/archive/1/492960/100/0/threaded  View
387308 35342 CVE-2008-5225 MISC:https://docushare.xerox.com/doug/dsweb/Get/Document-20353/SA30426-workaround.html  View
387309 35342 CVE-2008-5225 MISC:https://docushare.xerox.com/doug/dsweb/View/Collection-7503  View
387310 35342 CVE-2008-5225 BID:29430  View
387311 35342 CVE-2008-5225 URL:http://www.securityfocus.com/bid/29430  View
387312 35342 CVE-2008-5225 SECTRACK:1020147  View
387313 35342 CVE-2008-5225 URL:http://www.securitytracker.com/id?1020147  View
387314 35342 CVE-2008-5225 VUPEN:ADV-2008-1701  View
387315 35342 CVE-2008-5225 URL:http://www.vupen.com/english/advisories/2008/1701/references  View
387316 35342 CVE-2008-5225 SECUNIA:30426  View
387317 35342 CVE-2008-5225 URL:http://secunia.com/advisories/30426  View
387318 35342 CVE-2008-5225 SREASON:4638  View
387319 35342 CVE-2008-5225 URL:http://securityreason.com/securityalert/4638  View
387320 35342 CVE-2008-5225 XF:xerox-docushare-dsweb-xss(42748)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49791 JVNDB-2008-005101 Microsoft Windows Vista の iphlpapi.dll におけるスタックベースのバッファオーバーフローの脆弱性 Microsoft Windows Vista Gold および SP1 の iphlpapi.dll の Microsoft Device IO コントロールには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-5229 35342 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005101.html  View