AOH :: HP Unsorted X :: BX3364.HTM

XEROX DocuShare URL XSS Injection Vulnerabilities



XEROX DocuShare URL XSS Injection Vulnerabilities
XEROX DocuShare URL XSS Injection Vulnerabilities



XEROX DocuShare URL XSS Injection Vulnerabilities=0D
=0D
Xerox DocuShare is a flexible Web-based content management solution that brings greater productivity to every knowledge worker. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.=0D
=0D
=0D
Hackers Center Security Group (http://www.hackerscenter.com)=0D 
Credit: Doz=0D
=0D
Class: Cross Site Scripting=0D
Remote: Yes=0D
=0D
Product: DocuShare=0D
Vendor: http://docushare.xerox.com/=0D 
Version: 6 & Previous=0D
=0D
=0D
=0D
Attackers can exploit these issues via a web client.=0D
=0D
=0D
http://docushare.site.com/dsdn/dsweb/SearchResults/XSS=0D 
=0D
http://docushare.site.com/dsdn/dsweb/Services/User-XSS=0D 
=0D
http://docushare.site.com/docushare/dsweb/ServicesLib/Group-#/XSS=0D 
=0D
=0D
=0D
Google Dork: DocuShare Login

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.