IBM Open Admin Tool 'index.php' Multiple Cross-Site Scripting Vulnerability

This host is running IBM Open Admin Tool and is prone to multiple cross-site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmopenadmintoolmultxssvuln.nasl 3115 2016-04-19 10:09:30Z benallard $ IBM Open Admin Tool 'index.php' Multiple Cross-Site Scripting Vulnerability Authors:...

OpenAdmin Tool Detection

The remote web server hosts OpenAdmin Tool for Informix OAT, a PHP- based administration tool for managing Informix database servers. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56171; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...

OpenAdmin Tool for Informix informixserver Parameter XSS

The instance of OpenAdmin Tool for Informix hosted on the remote web server fails to sanitize user input to the 'informixserver' parameter of its 'index.php' script before using it to generate dynamic HTML output. An attacker may be able to leverage this issue to inject arbitrary HTML or script...

CVE-2011-3390

Multiple cross-site scripting XSS vulnerabilities in index.php in IBM OpenAdmin Tool OAT before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the 1 informixserver, 2 host, or 3 port parameter in a login action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in IBM OpenAdmin Tool OAT before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the 1 informixserver, 2 host, or 3 port parameter in a login action...

CVE-2011-3390

IBM Open Admin Tool (OAT) for Informix is affected by XSS in index.php prior to version 2.72. The vulnerability arises from insufficient input sanitization of the login action’s parameters (informixserver, host, port), enabling arbitrary script/HTML injection in a user’s browser. Mitigation: upgr...

PT-2011-4424

Name of the Vulnerable Software and Affected Versions IBM OpenAdmin Tool OAT for Informix versions prior to 2.72 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific...

CVE-2011-3390: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in IBM OpenAdmin Tool OAT before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the 1 informixserver, 2 host, or 3 port parameter in a login action...