ES is the new Enterprise Solution from DALIM SOFTWARE built from the successful TWIST, DIALOGUE and MISTRAL product lines. The ES Core is the engine that can handle project tracking, JDF device workflow, dynamic user interface building, volume management. Each ES installation will have different features, depending on the license installed: online approval, prepress workflow, project tracking, imposition management...
ES is a collaborative digital asset production and management platform, offering services ranging from online approval to web-based production environment for all participants of the production cycle, including brand owners, agencies, publishers, pre-media, printers and multichannel service provider. ES lets users plan, execute and control any aspect of media production, regardless of the final use of the output (print, web, ebook, movie, and others). It ensures productivity and longterm profitability.
The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site. XSS issues were also discovered. The issue is triggered when an unauthorized input passed via multiple POST and GET parameters are not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.