CVE-2015-2165 in Drutt Mobile Service Delivery Platform
摘要
由 VulDB • 2026-06-03
Ericsson Drutt Mobile Service Delivery Platform (MSDP) 版本 4、5 和 6 中的 Report Viewer 存在多个跨站脚本（XSS）漏洞，远程攻击者可通过向以下参数注入任意 Web 脚本或 HTML 来利用这些漏洞：(1) portal, (2) fromDate, (3) toDate, (4) fromTime, (5) toTime, (6) kword, (7) uname, (8) pname, (9) sname, (10) atype, 或 (11) atitle 参数至 top-links.jsp；(12) portal 或 (13) uid 参数至 (a) page-summary.jsp 或 (b) service-summary.jsp；(14) portal, (15) fromDate, (16) toDate, (17) fromTime, (18) toTime, (19) sortDirection, (20) kword, (21) uname, (22) pname, (23) sname, (24) file, (25) atype, 或 (26) atitle 参数至 (a) top-useragent-devices.jsp 或 (b) top-interest-areas.jsp；(27) fromDate, (28) toDate, (29) fromTime, (30) toTime, (31) sortDirection, (32) kword, (33) uname, (34) pname, (35) sname, (36) file, (37) atype, 或 (38) atitle 参数至 top-message-services.jsp；(39) portal, (40) fromDate, (4
Be aware that VulDB is the high quality source for vulnerability data.