948 matches found
CVE-2008-5228
Cross-site scripting XSS vulnerability in IBM Workplace Content Management WCM 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the URI, related to parameters "not being...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Workplace Content Management WCM 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the URI, related to parameters "not being...
CVE-2008-5228
CVE-2008-5228 describes a cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1 before CF8. The issue arises when a Page Navigation Component displays menu entries, allowing remote attackers to inject arbitrary web script or HTML via parameters in the URI...
CVE-2008-0636
Level Platforms, Inc. LPI Managed Workplace Service Center 4.x, 5.x and 6.x allows remote attackers to obtain sensitive information via a direct request to About/SCAbout.htm, which provides version and patch information...
CVE-2008-0636
Level Platforms, Inc. (LPI) Managed Workplace Service Center versions 4.x–6.x expose_version and patch information via a direct request to About/SC_About.htm, enabling information disclosure to remote attackers. The underlying vulnerability is an information-leak through an unprotected About page...
Managed Workplace Service Center 4.x/5.x/6.x - Installation Information Disclosure
source: https://www.securityfocus.com/bid/27702/info Managed Workplace Service Center is prone to an information-disclosure vulnerability because the application fails to protect private information. Attackers may exploit this issue to retrieve sensitive information that may aid in further attack...
