Unscored CVE-2004-0534 EUVD-2004-0533GHSA-45rq-wggf-p92p

Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows re…

Published Apr 14, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document.

References

20040907 Corsaire Security Advisory - Business Objects WebIntelligence XSS issue mailing-list
12587 third-party-advisory
11209 vdb-entry
20040917 Corsaire Security Advisory - Business Objects WebIntelligence XSS issue mailing-list
webintelligence-input-document-xss(17419) vdb-entry