CVE-2008-5225: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under (1) SearchResults/ and (2) Services/ in dsdn/dsweb/, and (3) the default URI under unspecified docushare/dsweb/ServicesLib/Group-#/ directories.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2008-5225?
CVE-2008-5225 is a vulnerability that allows remote attackers to perform multiple cross-site scripting (XSS) attacks on Xerox DocuShare 6 and earlier versions.
What are the affected versions of Xerox DocuShare for CVE-2008-5225?
Xerox DocuShare versions 4, 5, and 6, including specific sub-versions like 6.00.00.1 and 5.00.00.2, are affected by CVE-2008-5225.
How do I fix CVE-2008-5225?
To fix CVE-2008-5225, users should update Xerox DocuShare to the latest patched version provided by Xerox.
What are the potential impacts of CVE-2008-5225?
CVE-2008-5225 can allow attackers to inject and execute arbitrary web scripts or HTML, compromising the integrity and security of the application.
How can I determine if my system is vulnerable to CVE-2008-5225?
To determine if your system is vulnerable to CVE-2008-5225, check if you are running an affected version of Xerox DocuShare and review any related security notifications.