CVE - CVE-2010-2275

CVE-ID
CVE-2010-2275	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/test_Button.html.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
AIXAPAR:LO50833 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 AIXAPAR:LO50849 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849 AIXAPAR:LO50856 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1LO50856 AIXAPAR:LO50896 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1LO50896 AIXAPAR:LO50932 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932 AIXAPAR:LO50958 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1LO50958 AIXAPAR:LO50994 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1LO50994 CONFIRM:http://bugs.dojotoolkit.org/ticket/10773 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21431472 MISC:http://www.gdssecurity.com/l/b/2010/03/12/multiple-dom-based-xss-in-dojo-toolkit-sdk/ SECUNIA:38964 URL:http://secunia.com/advisories/38964 SECUNIA:40007 URL:http://secunia.com/advisories/40007 VUPEN:ADV-2010-1281 URL:~~http://www.vupen.com/english/advisories/2010/1281~~ (Obsolete source)
Assigning CNA
MITRE Corporation
Date Record Created
20100614	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20100614)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)