CVE

Id
47867  
CVE No.
CVE-2010-5283  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in OpenText ECM (formerly Livelink ECM) 9.7.1 allows remote attackers to hijack the authentication of administrators for requests that change folder and resource permissions.  
Phase
Assigned (20121126)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
520388 47867 CVE-2010-5283 FULLDISC:20100922 OpenText LiveLink 9.7.1 multiple vulnerabilities (CSRF, XSS)  View
520389 47867 CVE-2010-5283 URL:http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0359.html  View
520390 47867 CVE-2010-5283 MISC:http://packetstormsecurity.org/1009-exploits/opentext-xsrfxss.txt  View
520391 47867 CVE-2010-5283 OSVDB:68255  View
520392 47867 CVE-2010-5283 URL:http://www.osvdb.org/68255  View
520393 47867 CVE-2010-5283 SECUNIA:41553  View
520394 47867 CVE-2010-5283 URL:http://secunia.com/advisories/41553  View
520395 47867 CVE-2010-5283 XF:ecm-permissions-csrf(62057)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19749 JVNDB-2013-001324 Cornerstone Technologies webConductor の default.php における SQL インジェクションの脆弱性 Cornerstone Technologies webConductor の default.php には、SQL インジェクションの脆弱性が存在します。 CVE-2010-5287 47867 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001324.html  View