CVE-2009-1334: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in login/FilepathLogin.html in IBM Tivoli Continuous Data Protection CDP for Files 3.1.4.0 allows remote attackers to inject arbitrary web script or HTML via the reason parameter...

PT-2009-3866 · Ibm · Ibm Tivoli Continuous Data Protection For Files

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Continuous Data Protection CDP for Files version 3.1.4.0 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the reason parameter in the login/FilepathLogin.htm...