Lucene search
PRIOn knowledge basePRION:CVE-2014-0335HistoryMar 06, 2014 - 11:55 a.m.
Cross site scripting
2014-03-0611:55:00
PRIOn knowledge base
www.prio-n.com
4
Multiple cross-site scripting (XSS) vulnerabilities in the web client in Serena Dimensions CM 12.2 build 7.199.0 allow remote attackers to inject arbitrary web script or HTML via the (1) DB_CONN, (2) DB_NAME, (3) DM_HOST, (4) MAN_DB_NAME, (5) framecmd, (6) identifier, (7) merant.adm.adapters.AdmDialogPropertyMgr, (8) nav_frame, (9) nav_jsp, (10) target_frame, (11) id, or (12) type parameter to the dimensions/ URI.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dimensions_cm | eq | 12.2 build7.199.0 |
References
Related
nvd
nvd
CVE-2014-0335
2014-03-06 11:55:05
cvelist
cvelist
CVE-2014-0335
2014-03-06 11:00:00
cve
cve
CVE-2014-0335
2014-03-06 11:55:05
seebug
seebug
Serena Dimensions CM跨站脚本漏洞
2014-03-11 00:00:00
cert
cert
Serena Dimensions CM 12.2 Build 7.199.0 web client vulnerabilities
2014-03-05 00:00:00