Cross site scripting

Cross-site scripting XSS vulnerability in the Login page in IBM Lotus Web Content Management WCM 6.0.1.4, 6.0.1.5, and 6.0.1.6 before iFix 32; and 6.1.0.1 and 6.1.0.2 before iFix 24; for WebSphere Portal allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2010-0357

The CVE-2010-0357 issue is an XSS vulnerability in the IBM Lotus Web Content Management (WCM) login page used with WebSphere Portal. Affected product/version scope includes WCM 6.0.1.4–6.0.1.6 prior to iFix 32, and 6.1.0.1–6.1.0.2 prior to iFix 24. The vulnerability allows remote attackers to inj...

CVE-2010-0357

Cross-site scripting XSS vulnerability in the Login page in IBM Lotus Web Content Management WCM 6.0.1.4, 6.0.1.5, and 6.0.1.6 before iFix 32; and 6.1.0.1 and 6.1.0.2 before iFix 24; for WebSphere Portal allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2008-5228

CVE-2008-5228 describes a cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1 before CF8. The issue arises when a Page Navigation Component displays menu entries, allowing remote attackers to inject arbitrary web script or HTML via parameters in the URI...