CVE-2013-0455: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Sterling B2B Integrator 5.2.4 and Sterling File Gateway allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-4078

Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway version 2.2 IBM Sterling B2B Integrator version 2.2 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Recommendations For IBM Sterling File Gateway...

PT-2013-2350

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator version 5.2.4 IBM Sterling File Gateway affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject...

CVE-2012-5937

Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through 2.2 and other products, allows remote attackers to execute arbitrary commands via unknown vectors...

Code injection

Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through 2.2 and other products, allows remote attackers to execute arbitrary commands via unknown vectors...

CVE-2012-5937

The CVE-2012-5937 issue affects IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0/5.1, and Sterling B2B Integrator 5.2, as used with IBM Sterling File Gateway 1.1–2.2. The CLA2 server contains an unspecified vulnerability that permits an unauthenticated attacker to execute arbitrary OS c...

PT-2013-1850

Name of the Vulnerable Software and Affected Versions IBM Gentran Integration Suite version 4.3 Sterling Integrator versions 5.0 through 5.1 Sterling B2B Integrator version 5.2 IBM Sterling File Gateway versions 1.1 through 2.2 Description The issue allows remote attackers to execute arbitrary...

CVE-2012-5937: Undefined Security Weakness

Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through 2.2 and other products, allows remote attackers to execute arbitrary commands via unknown vectors...

CVE-2013-0108

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator EBI R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager aka CPO-M Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code vi...

PT-2013-2102

Name of the Vulnerable Software and Affected Versions Honeywell Enterprise Buildings Integrator versions R310, R400.2, R410.1, R410.2 SymmetrE versions R310, R410.1, R410.2 ComfortPoint Open Manager Station version R100 HMIWeb Browser client packages affected versions not specified Description Th...

CVE-2013-0108: Improper Control of Generation of Code

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator EBI R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager aka CPO-M Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code vi...

Cross site scripting

Cross-site scripting XSS vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php...

CVE-2012-5913

The CVE-2012-5913 vulnerability affects the WordPress Integrator plugin (version 1.32) for WordPress, specifically the wp-integrator.php file. The issue is a Cross-Site Scripting (XSS) flaw that allows remote attackers to inject arbitrary script/HTML via the redirect_to parameter to wp-login.php....

CVE-2012-5913

Cross-site scripting XSS vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php...

PT-2012-6194

Name of the Vulnerable Software and Affected Versions WordPress Integrator module version 1.32 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the redirect to parameter to "wp-login.php". Recommendations For WordPress Integrator modu...

CVE-2012-5913: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php...

CVE-2012-1653

Cross-site scripting XSS vulnerability in the Taxonomy Views Integrator TVI module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to "views pages."...

CVE-2012-1653

Cross-site scripting XSS vulnerability in the Taxonomy Views Integrator TVI module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to "views pages."...

CVE-2012-1653

The CVE-2012-1653 issue affects the Taxonomy Views Integrator (TVI) module for Drupal 6.x-1.x before 6.x-1.3. The vulnerability arises from insufficient filtering of user-supplied text on views pages, enabling XSS by authenticated users. Impact is limited to partial integrity of data and arbitrar...

CVE-2012-1653: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Taxonomy Views Integrator TVI module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to "views pages."...