Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the filename parameter.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')