cvelist/2010/2xxx/CVE-2010-2275.json
2017-10-16 12:31:07 -04:00

97 lines
2.7 KiB
JSON

{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2010-2275",
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a",
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
},
"vendor_name" : "n/a"
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/test_Button.html."
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "n/a"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"url" : "http://www.gdssecurity.com/l/b/2010/03/12/multiple-dom-based-xss-in-dojo-toolkit-sdk/"
},
{
"url" : "http://bugs.dojotoolkit.org/ticket/10773"
},
{
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21431472"
},
{
"url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833"
},
{
"url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849"
},
{
"url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1LO50856"
},
{
"url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1LO50896"
},
{
"url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932"
},
{
"url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1LO50958"
},
{
"url" : "http://www-1.ibm.com/support/docview.wss?uid=swg1LO50994"
},
{
"url" : "http://secunia.com/advisories/38964"
},
{
"url" : "http://secunia.com/advisories/40007"
},
{
"url" : "http://www.vupen.com/english/advisories/2010/1281"
}
]
}
}