Identification : DOINGSOFT-2008-03-10-001
CVE-ID : pending
Discovery date : 14/12/2007
Correcting Date : 03/04/2008
How to get the patch :
http://support.businessobjects.com/d...es/default.asp
choose "FixPack 3.5"

Publishing date : 14/04/2008
Product : Business Object Infoview XI R2 Java version
Affected Version : XI R2, XI R2 SP1, XI R2 SP2, XI R2 SP3
Immunes Versions : Business Object Infoview XI R2 .Net version

Vulnerability : Cross Site Scripting (XSS)
Description : BOxiR2 is vulnerable of XSS attacks on the login URL
via the CMS variable.
With malicious utilization an attacker could get login/password and
datas or reports.


Example :
http://www.monserveurBO.com/business...Page=true&cms=
>%22%27><img%20src%3d%22javascript:alert(%27XSS%20 Test%20Successful
%27)%22>"