CVE-2008-0769

CVE-2008-0769 affects EMC Livelink ECM versions 9.0.0 through 9.7.0 (possibly earlier). The root cause is that the application does not set the character set, enabling cross-site scripting (XSS) via UTF-7 encoded input. Documented in multiple sources (NVD entry, CVE lists), it indicates an input‑...

CVE-2010-5282

CVE-2010-5282 describes multiple cross-site scripting (XSS) vulnerabilities in OpenText ECM (formerly Livelink ECM) 9.7.1. The flaws allow remote attackers to inject arbitrary web script or HTML via parameters in the browser action (viewType, sort) to livelink/livelink, and via (nodeid, setctx, s...

CVE-2010-5283

CVE-2010-5283 describes a cross-site request forgery (CSRF) in OpenText ECM (formerly Livelink ECM) 9.7.1 . The vulnerability allows remote attackers to hijack the authentication of administrators and perform requests that change folder and resource permissions. The primary sources confirm the af...