Cross-site scripting (XSS) vulnerability in OpenDocMan before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the redirection parameter.Referenceshttp://jvn.jp/en/jp/JVN00015036/index.htmlhttp://www.opendocman.com/opendocman-v1-3-4-released/http://www.securitytracker.com/id/1033482http://jvndb.jvn.jp/jvndb/JVNDB-2015-000128
