CVE-2011-2754

Cross-site scripting XSS vulnerability in the PageBuilder2 aka Page Builder theme in IBM WebSphere Portal 7.x before 7.0.0.1 CF006, as used in IBM Web Content Manager WCM and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4810

Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager AWCM 2.1 final allow remote attackers to execute arbitrary PHP code via a URL in the themefile parameter to 1 includes/windowtop.php and 2 header.php, and the 3 langfile parameter to control/common.php...

CVE-2010-4810

Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager AWCM 2.1 final allow remote attackers to execute arbitrary PHP code via a URL in the themefile parameter to 1 includes/windowtop.php and 2 header.php, and the 3 langfile parameter to control/common.php...

CVE-2010-4810

CVE-2010-4810 affects AR Web Content Manager (AWCM) with multiple remote file include vulnerabilities. Public details show that AWCM versions around 2.1 final (and up to 2.2 per OpenVAS) are vulnerable to RFI via theme_file parameters to includes/window_top.php and header.php, and lang_file param...

CVE-2010-4807

Race condition in IBM Web Content Manager WCM 7.0.0.1 before CF003 allows remote authenticated users to cause a denial of service infinite recursive query via unspecified vectors, related to a StackOverflowError exception...

Design/Logic Flaw

The authoring tool in IBM Web Content Manager WCM 6.1.5, and 7.0.0.1 before CF003, allows remote authenticated users to bypass intended access restrictions on draft creation by leveraging certain resource editor privileges...

Race condition

Race condition in IBM Web Content Manager WCM 7.0.0.1 before CF003 allows remote authenticated users to cause a denial of service infinite recursive query via unspecified vectors, related to a StackOverflowError exception...

CVE-2010-4807

Race condition in IBM Web Content Manager WCM 7.0.0.1 before CF003 allows remote authenticated users to cause a denial of service infinite recursive query via unspecified vectors, related to a StackOverflowError exception...

AR Web Content Manager (AWCM) 'search.php' Cross Site Scripting Vulnerability

AR Web Content Manager AWCM is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1668

Cross-site scripting XSS vulnerability in search.php in AR Web Content Manager AWCM 2.1, 2.2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the search parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in AR Web Content Manager AWCM 2.1, 2.2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2011-1668

Cross-site scripting XSS vulnerability in search.php in AR Web Content Manager AWCM 2.1, 2.2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the search parameter...

AR Web Content Manager (AWCM) Cross-Site scripting Vulnerability

AR Web Content Manager AWCM v2.2 Cross-Site scripting Vulnerability SecPod Technologies www.secpod.com Author: Antu Sanadi SecPod ID: 1012 21/03/2011 Issue Discovered 24/03/2011 Vendor Notified 24/03/2011 Vendor Responded 25/03/2011 Vendor Solution Class: Cross-Site Scripting Severity: Medium...

AR Web Content Manager 2.2 Cross Site Scripting

AR Web Content Manager AWCM v2.2 Cross-Site scripting Vulnerability SecPod Technologies www.secpod.com Author: Antu Sanadi SecPod ID: 1012 21/03/2011 Issue Discovered 24/03/2011 Vendor Notified 24/03/2011 Vendor Responded 25/03/2011 Vendor Solution Class: Cross-Site Scripting Severity: Medium...

MC Content Manager 10.1.1 Cross Site Scripting

Hello list! I want to warn you about Cross-Site Scripting, Abuse of Functionality and Insufficient Anti-automation vulnerabilities in MC Content Manager. It's Ukrainian commercial CMS. ------------------------- Affected products: ------------------------- Vulnerable are potentially all versions o...

XSS, AoF и IAA уязвимости в MC Content Manager

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в системе MC Content Manager. Это украинская коммерческая CMS. XSS WASC-08: Уязвимости на страницах регистрации и восстановления пароля. http://websecurity.com.ua/uploads/2011/MC20Content20Manager20XSS.html...

Cross-Site Scripting уязвимости в MC Content Manager

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в системе MC Content Manager. Это украинская коммерческая CMS. XSS WASC-08: POST запрос на странице http://site/ru/cms/search "scriptalertdocument.cookie/script В поле поиска. XSS WASC-08:...

MC Content Manager Cross Site Scripting

Hello list! I want to warn you about Cross-Site Scripting vulnerabilities in MC Content Manager. It's Ukrainian commercial CMS. ------------------------- Affected products: ------------------------- Vulnerable are previous versions of MC Content Manager before version v.10.1.1. ---------- Details...

CVE-2011-1046

CVE-2011-1046 : IBM FileNet P8 Content Engine (P8CE) versions 4.0.1–5.0.0 (used in FileNet P8 CM and BPM) do not require the PRIVILEGED_WRITE access role for all intended Object Store modifications, allowing remote attackers to change a privileged property of an object through unspecified vectors...

CVE-2011-1046

IBM FileNet P8 Content Engine aka P8CE 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager CM and FileNet P8 Business Process Manager BPM, does not require the PRIVILEGEDWRITE access role for all intended Object Store modifications, which allows remote attackers to change a privileged...