IBM OpenAdmin Tool welcomeService.php Remote Code Execution

The version of OpenAdmin Tool installed on the remote host is affected by a remote code execution vulnerability. The welcomeService.php file offers a SOAP interface, which does not validate code passed to the 'saveHomePage' method, allowing a remote attacker to save arbitrary code into...

IBM OpenAdmin Tool SOAP welcomeServer PHP Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IBM OpenAdmin Tool SOAP welcomeServer PHP Code Execution', 'Description' = %q This module exploits an unauthenticated remote PHP code execution...

IBM OpenAdmin Tool - SOAP welcomeServer PHP Code Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IBM OpenAdmin Tool SOAP welcomeServer PHP Code Execution', 'Description' = %q This module exploits an unauthenticated remote PHP code execution...

IBM OpenAdmin Tool SOAP welcomeServer PHP Code Execution

This module exploits an unauthenticated remote PHP code execution vulnerability in IBM OpenAdmin Tool included with IBM Informix versions 11.5, 11.7, and 12.1. The 'welcomeServer' SOAP service does not properly validate user input in the 'newhomepage' parameter of the 'saveHomePage' method allowi...

IBM Open Admin Tool 'index.php' Multiple Cross-Site Scripting Vulnerability

This host is running IBM Open Admin Tool and is prone to multiple cross-site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmopenadmintoolmultxssvuln.nasl 3115 2016-04-19 10:09:30Z benallard $ IBM Open Admin Tool 'index.php' Multiple Cross-Site Scripting Vulnerability Authors:...

CVE-2011-3390

Multiple cross-site scripting XSS vulnerabilities in index.php in IBM OpenAdmin Tool OAT before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the 1 informixserver, 2 host, or 3 port parameter in a login action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in IBM OpenAdmin Tool OAT before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the 1 informixserver, 2 host, or 3 port parameter in a login action...

CVE-2011-3390

IBM Open Admin Tool (OAT) for Informix is affected by XSS in index.php prior to version 2.72. The vulnerability arises from insufficient input sanitization of the login action’s parameters (informixserver, host, port), enabling arbitrary script/HTML injection in a user’s browser. Mitigation: upgr...