CVE:CVE-2007-3255
CNNVD:CNNVD-200706-493
Xythos Enterprise Document Manager中存在多个跨站请求伪造漏洞。远程认证用户可以借助(1)一个保存的Workflow名或(2)Content-Type HTTP头，以任意用户的身份执行指令。
solution:Upgrade xythos enterprise_document_manager to a higher version than 5.0.25.7,6.0.46.0,and avoid the version (,5.0.25.7],(,6.0.46.0]