HSC Research Group -
Written by Hackers Center
Thursday, 29 May 2008 20:04
Xerox DocuShare is a flexible Web-based content management solution that brings greater productivity to every knowledge worker. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Hackers Center Security Group (http://www.hackerscenter.com)
Class: Cross Site Scripting
Version: 6 & Previous
Attackers can exploit these issues via a web client.
Google Dork: DocuShare Login
Security researcher? Join us: mail Zinho at zinho at hackerscenter.com