CVE-2006-6537

IBM WebSphere Host On-Demand versions 6.0–9.0 (and possibly 10) areAffected by CVE-2006-6537 due to an authentication bypass via a modified pnl parameter in hod/HODAdmin.html and hod/frameset.html. This remote-auth bypass vulnerability could allow an attacker to gain access without valid credenti...