EUVD-2010-5241

Malware in sbrugna...

EUVD-2010-5242

Malware in sbrugna...

OpenText/IXOS ECM for SAP NetWeaver code exeution

ABAP code injection...

CVE-2010-5283

Cross-site request forgery CSRF vulnerability in OpenText ECM formerly Livelink ECM 9.7.1 allows remote attackers to hijack the authentication of administrators for requests that change folder and resource permissions...

CVE-2010-5282

Multiple cross-site scripting XSS vulnerabilities in OpenText ECM formerly Livelink ECM 9.7.1 allow remote attackers to inject arbitrary web script or HTML via the 1 viewType and 2 sort parameters in a browse action to livelink/livelink; and the 3 nodeid, 4 setctx, and 5 support parameters to...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in OpenText ECM formerly Livelink ECM 9.7.1 allows remote attackers to hijack the authentication of administrators for requests that change folder and resource permissions...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in OpenText ECM formerly Livelink ECM 9.7.1 allow remote attackers to inject arbitrary web script or HTML via the 1 viewType and 2 sort parameters in a browse action to livelink/livelink; and the 3 nodeid, 4 setctx, and 5 support parameters to...

CVE-2010-5283

CVE-2010-5283 describes a cross-site request forgery (CSRF) in OpenText ECM (formerly Livelink ECM) 9.7.1 . The vulnerability allows remote attackers to hijack the authentication of administrators and perform requests that change folder and resource permissions. The primary sources confirm the af...

CVE-2010-5283

Cross-site request forgery CSRF vulnerability in OpenText ECM formerly Livelink ECM 9.7.1 allows remote attackers to hijack the authentication of administrators for requests that change folder and resource permissions...

CVE-2010-5282

Multiple cross-site scripting XSS vulnerabilities in OpenText ECM formerly Livelink ECM 9.7.1 allow remote attackers to inject arbitrary web script or HTML via the 1 viewType and 2 sort parameters in a browse action to livelink/livelink; and the 3 nodeid, 4 setctx, and 5 support parameters to...

CVE-2010-5282

CVE-2010-5282 describes multiple cross-site scripting (XSS) vulnerabilities in OpenText ECM (formerly Livelink ECM) 9.7.1. The flaws allow remote attackers to inject arbitrary web script or HTML via parameters in the browser action (viewType, sort) to livelink/livelink, and via (nodeid, setctx, s...

PT-2012-1493

Name of the Vulnerable Software and Affected Versions OpenText ECM formerly Livelink ECM version 9.7.1 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that change folder and resource permissions. Recommendations Fo...

PT-2012-1492

Name of the Vulnerable Software and Affected Versions OpenText ECM formerly Livelink ECM version 9.7.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via...

CVE-2010-5283: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in OpenText ECM formerly Livelink ECM 9.7.1 allows remote attackers to hijack the authentication of administrators for requests that change folder and resource permissions...

CVE-2010-5282: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in OpenText ECM formerly Livelink ECM 9.7.1 allow remote attackers to inject arbitrary web script or HTML via the 1 viewType and 2 sort parameters in a browse action to livelink/livelink; and the 3 nodeid, 4 setctx, and 5 support parameters to...