CVE

Id
47866  
CVE No.
CVE-2010-5282  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in OpenText ECM (formerly Livelink ECM) 9.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) viewType and (2) sort parameters in a browse action to livelink/livelink; and the (3) nodeid, (4) setctx, and (5) support parameters to livelinkdav/nodes/OOB_DAVWindow.html.  
Phase
Assigned (20121126)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
520378 47866 CVE-2010-5282 FULLDISC:20100922 OpenText LiveLink 9.7.1 multiple vulnerabilities (CSRF, XSS)  View
520379 47866 CVE-2010-5282 URL:http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0359.html  View
520380 47866 CVE-2010-5282 MISC:http://packetstormsecurity.org/1009-exploits/opentext-xsrfxss.txt  View
520381 47866 CVE-2010-5282 OSVDB:68256  View
520382 47866 CVE-2010-5282 URL:http://www.osvdb.org/68256  View
520383 47866 CVE-2010-5282 OSVDB:68257  View
520384 47866 CVE-2010-5282 URL:http://www.osvdb.org/68257  View
520385 47866 CVE-2010-5282 SECUNIA:41553  View
520386 47866 CVE-2010-5282 URL:http://secunia.com/advisories/41553  View
520387 47866 CVE-2010-5282 XF:ecm-multiple-xss(62056)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29854 JVNDB-2012-005561 Joomla! 用 Jstore コンポーネントにおけるディレクトリトラバーサルの脆弱性 Joomla! 用 Jstore (com_jstore) コンポーネントには、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2010-5286 47866 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005561.html  View