EMC Documentum D2 4.5 / 4.6 DQL Injection / Cross Site Scripting

EMC Documentum versions 4.5 and 4.6 suffer from DQL injection and cross site scripting vulnerabilities.