PRIOn knowledge basePRION:CVE-2006-2431Cross site scripting
Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7, allows remote attackers to inject arbitrary web script or HTML via the URI, which is contained in a FAULTACTOR element on this page. NOTE: some sources have reported the element as “faultfactor,” but this is likely erroneous.
References
archives.neohapsis.com/archives/bugtraq/2006-05/0175.html
secunia.com/advisories/20032
securityreason.com/securityalert/910
securitytracker.com/id?1017170
www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK16492&uid=swg1PK22416&loc=en_US&cs=utf-8&lang=
www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012064
www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012163
www-1.ibm.com/support/search.wss?rs=0&q=PK16602&apar=only
www-1.ibm.com/support/search.wss?rs=0&q=PK26181&apar=only
www.attrition.org/pipermail/vim/2006-November/001112.html
www.niscc.gov.uk/niscc/docs/re-20061031-00727.pdf?lang=en
www.osvdb.org/25371
www.securityfocus.com/archive/1/450704/100/0/threaded
www.securityfocus.com/bid/21018
www.vupen.com/english/advisories/2006/1736
exchange.xforce.ibmcloud.com/vulnerabilities/30055
Related
