CVEs-PoC/2018/CVE-2018-7660.md

CVE-2018-7660

Description

In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Reflected Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compromise the affected system via the servlet/Download _docbase or _username parameter.

POC

Reference

• https://vipinxsec.blogspot.com/2018/04/reflected-xss-in-documentum-d2.html
• https://vipinxsec.blogspot.com/2018/04/reflected-xss-in-documentum-d2.html

Github

No PoCs found on GitHub currently.