CVE-2008-6436

Cross-site scripting (XSS) vulnerability in the Web Server in Xerox WorkCentre 7132, 7228, 7235, and 7245 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Link	Resource
http://www.securityfocus.com/bid/29345
http://www.xerox.com/downloads/usa/en/c/cert_XRX08_004.pdf	Patch Vendor Advisory
http://secunia.com/advisories/30364	Vendor Advisory
http://www.vupen.com/english/advisories/2008/1628/references	Patch Vendor Advisory
http://osvdb.org/45627
https://exchange.xforce.ibmcloud.com/vulnerabilities/42595

Configuration 1

cpe:2.3:h:xerox:workcentre:7235:*:*:*:*:*:*:* cpe:2.3:h:xerox:workcentre:7132:*:*:*:*:*:*:* cpe:2.3:h:xerox:workcentre:7228:*:*:*:*:*:*:* cpe:2.3:h:xerox:workcentre:7245:*:*:*:*:*:*:*

---

Published : 2009-03-06 06:30

Updated : 2017-08-17 01:29

---

NVD link : CVE-2008-6436

Mitre link : CVE-2008-6436

No products.

CWE-79