CVE-2008-5225

Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under (1) SearchResults/ and (2) Services/ in dsdn/dsweb/, and (3) the default URI under unspecified docushare/dsweb/ServicesLib/Group-#/ directories.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

4.10% chance of exploitation in the next 30 days, 90th percentile

Published

2008-11-25

Updated

2024-08-07

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/31864
• https://www.exploit-db.com/exploits/31863
• https://www.exploit-db.com/exploits/31862

References

• CVE Record
• NVD entry

Related

• CVE-2008-5223
• CVE-2008-5226
• CVE-2008-5222
• CVE-2008-5229
• CVE-2008-5221
• CVE-2008-5232