|
Description
|
|
Multiple vulnerabilities have been identified in AXIS 70U Network Document Server, which could be exploited by attackers or malicious users to disclose sensitive information.
The first issue is caused by an input validation error in the "user/help/help.shtml" script , which could be exploited by malicious users to include or disclose the contents of local files with the privileges of the web server.
The second vulnerability is caused by input validation errors in the "user/help/help.shtml" and "user/help/general_help_user.shtml" scripts when processing user-supplied URIs, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site.
|
