Security Bulletin: Multiple cross-site scripting (XSS) vulnerabilities in IBM Dojo Toolkit affects IBM Case Manager (CVE-2014-8917)

Summary There are multiple cross-site scripting XSS vulnerabilities in 1 uploader.swf, 2 fileuploader.swf, 3 audio.swf, and 4 video.swf in the IBM Dojo Toolkit. Vulnerability Details CVE-ID: CVE-2014-8917 Description: There are multiple cross-site scripting XSS vulnerabilities in the following IB...

CVE-2015-1979

Multiple cross-site scripting XSS vulnerabilities in the Error dialog in IBM Case Manager 5.2.1 before 5.2.1.2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to the 1 addressability or 2 comments component...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Error dialog in IBM Case Manager 5.2.1 before 5.2.1.2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to the 1 addressability or 2 comments component...

CVE-2015-1979

Multiple cross-site scripting XSS vulnerabilities in the Error dialog in IBM Case Manager 5.2.1 before 5.2.1.2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to the 1 addressability or 2 comments component...

CVE-2015-1979

CVE-2015-1979 details (IBM Case Manager) : Affected product is IBM Case Manager 5.2.1, vulnerable before 5.2.1.2. The issue resides in the Error dialog where remote authenticated users can inject arbitrary web script or HTML via crafted input to the (1) addressability or (2) comments component, i...

PT-2015-5527

Name of the Vulnerable Software and Affected Versions IBM Case Manager version 5.2.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Error dialog. These vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via crafted inpu...

CVE-2015-1979: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Error dialog in IBM Case Manager 5.2.1 before 5.2.1.2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to the 1 addressability or 2 comments component...

IBM Case Manager Cross-Site Scripting Vulnerability

IBM Case Manager is a solution for managing cases. The solution supports the combination of content, processes and people, and provides frameworks, relevance methods and integration tools to view a holistic view of cases. A cross-site scripting vulnerability exists in IBM Case Manager, which allo...

VU Case Manager - Authentication Bypass

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

VU Case Manager Authentication Bypass

Exploit for asp platform in category web applications ===================================== VU Case Manager Authentication Bypass ===================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /...

Sql injection

SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username parameter, a different vector than CVE-2007-6143. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-6168

SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username parameter, a different vector than CVE-2007-6143. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-6168

CVE-2007-6168 affects VU Case Manager: SQL injection in default.asp (Login Page) via the username parameter, enabling remote SQL execution. This is a different vector from CVE-2007-6143, which uses the password parameter. No remediation or exploit details are provided in the supplied documents.

CVE-2007-6168

SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username parameter, a different vector than CVE-2007-6143. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-6168: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username parameter, a different vector than CVE-2007-6143. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Sql injection

SQL injection vulnerability in default.asp aka the Login Page in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2007-6143

SQL injection vulnerability in default.asp aka the Login Page in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2007-6143

SQL injection vulnerability in default.asp aka the Login Page in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2007-6143

Vulnerability: CVE-2007-6143 affects VU Case Manager (default.asp login page). Cause: SQL injection via the password parameter, enabling remote attackers to execute arbitrary SQL commands. Impact: partial confidentiality, integrity, and availability concerns for the application, with network-leve...

CVE-2007-6143: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp aka the Login Page in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the password parameter...