CVE-2015-5625 Information

Description

Cross-site scripting (XSS) vulnerability in OpenDocMan before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the redirection parameter.

Reference

http://jvn.jp/en/jp/JVN00015036/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2015-000128 http://www.opendocman.com/opendocman-v1-3-4-released/ http://www.securitytracker.com/id/1033482