EUVD-2010-1272

Malware in sbrugna...

EUVD-2010-1273

Malware in sbrugna...

EUVD-2011-1560

Malware in sbrugna...

CVE-2011-1559

Unspecified vulnerability in the IBM Web Interface for Content Management aka WEBi 1.0.4 before FP3 has unknown impact and attack vectors...

CVE-2011-1558

Multiple cross-site scripting XSS vulnerabilities in the IBM Web Interface for Content Management aka WEBi 1.0.4 before FP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-1242...

Security Bulletin: Open Source Apache Struts V1 ClassLoader manipulation vulnerability (CVE-2014-0114) in IBM Web Interface for Content Management (WEBi)

Summary Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by the failure to restrict the setting of Class Loader attributes. An attacker could exploit this vulnerability using the class parameter of an ActionForm object to manipulate the ClassLoader and...

IBM Lotus Sametime Version Enumeration

This module scans an IBM Lotus Sametime web interface to enumerate the application's version and configuration information. Module Options msf use auxiliary/gather/ibm/sametimeversion msf undefinedsametimeversion show actions ...actions... msf undefinedsametimeversion set ACTION msf...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the IBM Web Interface for Content Management aka WEBi 1.0.4 before FP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-1242...

Code injection

Unspecified vulnerability in the IBM Web Interface for Content Management aka WEBi 1.0.4 before FP3 has unknown impact and attack vectors...

CVE-2011-1559

Unspecified vulnerability in the IBM Web Interface for Content Management aka WEBi 1.0.4 before FP3 has unknown impact and attack vectors...

CVE-2011-1558

Multiple cross-site scripting XSS vulnerabilities in the IBM Web Interface for Content Management aka WEBi 1.0.4 before FP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-1242...

CVE-2011-1558: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the IBM Web Interface for Content Management aka WEBi 1.0.4 before FP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-1242...

CVE-2011-1559: Undefined Security Weakness

Unspecified vulnerability in the IBM Web Interface for Content Management aka WEBi 1.0.4 before FP3 has unknown impact and attack vectors...

PT-2011-3215

Name of the Vulnerable Software and Affected Versions IBM Web Interface for Content Management aka WEBi version 1.0.4 before FP3 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML vi...

PT-2011-3216

Name of the Vulnerable Software and Affected Versions IBM Web Interface for Content Management aka WEBi version 1.0.4 before FP3 Description The issue concerns an unspecified vulnerability with unknown impact and attack vectors. Recommendations For IBM Web Interface for Content Management aka WEB...

CVE-2010-1242

Multiple cross-site scripting XSS vulnerabilities in the IBM Web Interface for Content Management aka WEBi before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1243

The IBM Web Interface for Content Management aka WEBi before 1.0.4 creates persistent cookies on client workstations, which has unspecified impact and attack vectors...

Code injection

The IBM Web Interface for Content Management aka WEBi before 1.0.4 creates persistent cookies on client workstations, which has unspecified impact and attack vectors...

CVE-2010-1243

The IBM Web Interface for Content Management aka WEBi before 1.0.4 creates persistent cookies on client workstations, which has unspecified impact and attack vectors...

CVE-2010-1242: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the IBM Web Interface for Content Management aka WEBi before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...