QwikSec

Security Database

CVE

CWE

Training

CVE-2008-1894

Published: Apr 18, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in desktoplaunch/InfoView/logon/logon.object in BusinessObjects InfoView XI R2 SP1, SP2, and SP3 Java version before FixPack 3.5 allows remote attackers to inject arbitrary web script or HTML via the cms parameter.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://resources.businessobjects.com/support/communitycs/FilesAndUpdates/boxir2_en_FixPack3.5_readme.pdf?recDnlReq=Record&dnlPath=boxir2_en_FixPack3.5_readme.pdf

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

20080413 DOINGSOFT-2008-03-10-001 - XSS issue in BOXiR2

mailing-list

x_refsource_FULLDISC

vdb-entry

x_refsource_BID

20080413 DOINGSOFT-2008-03-10-001 - XSS issue in BOXiR2

mailing-list

x_refsource_BUGTRAQ

businessobjects-cms-xss(41875)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.