CVE-2009-3730

Summary of CVE-2009-3730 (IBM Rational RequisitePro 7.1.0): Multiple cross-site scripting (XSS) vulnerabilities affect the ReqWeb Help feature (Web Client Help) where user-supplied input is not sanitized before being emitted into HTML. The flaws are triggered via several parameters in JSP pages: ...

IBM Rational RequisitePro ReqWebHelp Multiple XSS

IBM Rational RequisitePro is installed on the remote host. The installed version contains two JSP scripts that are affected by cross-site scripting vulnerabilities. Specifically, it fails to sanitize input to the 'searchWord', 'maxHits', 'scopedSearch', and 'scope' parameters of 'searchView.jsp'...

IBM Rational RequisitePro 7.10 ReqWebHelp - Multiple Cross-Site Scripting Vulnerabilities

IBM Rational RequisitePro 7.10 ReqWebHelp - Multiple Cross-Site Scripting Vulnerabilities Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI. The following example URIs are available:...

IBM Rational RequisitePro 7.10 - ReqWeb Help Feature ReqWebHelpbasicsearchView.jsp Multiple Cross-Site Scripting Vulnerabilities

IBM Rational RequisitePro 7.10 - ReqWeb Help Feature ReqWebHelpbasicsearchView.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/36721/info IBM Rational RequisitePro is prone to multiple cross-site scripting vulnerabilities because it fails to properly...

IBM Rational RequisitePro 7.10 - ReqWeb Help Feature ReqWebHelpadvancedworkingSet.jsp?Operation Cross-Site Scripting

IBM Rational RequisitePro 7.10 - ReqWeb Help Feature ReqWebHelpadvancedworkingSet.jsp?Operation Cross-Site Scripting source: https://www.securityfocus.com/bid/36721/info IBM Rational RequisitePro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize...

IBM Rational RequisitePro 7.10 and ReqWebHelp Multiple CSS

Exploit for jsp platform in category web applications =========================================================================== IBM Rational RequisitePro 7.10 and ReqWebHelp Multiple Cross Site Scripting =========================================================================== Attackers can...

IBM Rational RequisitePro 7.10 and ReqWebHelp Multiple Cross Site Scripting

No description provided by source. Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI. The following example URIs are available: http://www.example.com/ReqWebHelp/advanced/workingSet.jsp?operation=add/--/scriptscriptalert289325/scriptworkingSet=...

IBM Rational RequisitePro 7.10 - 'ReqWeb Help Feature ReqWebHelp/advanced/workingSet.jsp?Operation' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36721/info IBM Rational RequisitePro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

IBM Rational RequisitePro 7.10 - ReqWeb Help Feature 'ReqWebHelp/basic/searchView.jsp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36721/info IBM Rational RequisitePro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

IBM Rational RequisitePro 7.10 / ReqWebHelp - Multiple Cross-Site Scripting Vulnerabilities

Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI. The following example URIs are available: http://www.example.com/ReqWebHelp/advanced/workingSet.jsp?operation=add/--/scriptscriptalert289325/script&workingSet=...