1037 matches found
CVE-2008-6106
Cross-site request forgery CSRF vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x has unknown impact and remote attack vectors. NOTE: some of these details are obtained from third party information...
CVE-2008-6106
CSRF vulnerability CVE-2008-6106 affects IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x. The available documents confirm the affected products/versions but do not disclose the root cause specifics, impact details, or exploitation vectors. No mit...
CVE-2008-6105
The CVE-2008-6105 entry affects IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x with a cross-site scripting (XSS) vulnerability that allows remote injection of arbitrary script/HTML via unspecified vectors. NVD reports a base score of 4.3 (MEDIUM...
CVE-2008-6105
Cross-site scripting XSS vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party informatio...
CVE-2008-6105: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party informatio...
CVE-2008-6106: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x has unknown impact and remote attack vectors. NOTE: some of these details are obtained from third party information...
IBM Workplace Web Content Management远程跨站脚本漏洞
BUGTRAQ ID: 32408 IBM Workplace Web Content Management是IBM Workplace家族的产品之一，帮助用户在Internet和内网上发布公司内容。 Web Content Management的页面导航组件没有正确地验证通过URL参数所传送的输入便返回给了用户，远程攻击者可以通过提交恶意请求执行跨站脚本攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。 IBM Workplace Web Content Management 60G 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2008-5228
Cross-site scripting XSS vulnerability in IBM Workplace Content Management WCM 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the URI, related to parameters "not being...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Workplace Content Management WCM 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the URI, related to parameters "not being...
CVE-2008-5228
CVE-2008-5228 describes a cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1 before CF8. The issue arises when a Page Navigation Component displays menu entries, allowing remote attackers to inject arbitrary web script or HTML via parameters in the URI...
CVE-2008-5228: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in IBM Workplace Content Management WCM 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the URI, related to parameters "not being...
CVE-2008-0636
Level Platforms, Inc. LPI Managed Workplace Service Center 4.x, 5.x and 6.x allows remote attackers to obtain sensitive information via a direct request to About/SCAbout.htm, which provides version and patch information...
CVE-2008-0636
Level Platforms, Inc. (LPI) Managed Workplace Service Center versions 4.x–6.x expose_version and patch information via a direct request to About/SC_About.htm, enabling information disclosure to remote attackers. The underlying vulnerability is an information-leak through an unprotected About page...
CVE-2008-0636: Exposure of Sensitive Information to an Unauthorized Actor
Level Platforms, Inc. LPI Managed Workplace Service Center 4.x, 5.x and 6.x allows remote attackers to obtain sensitive information via a direct request to About/SCAbout.htm, which provides version and patch information...
Managed Workplace Service Center 4.x/5.x/6.x - Installation Information Disclosure
source: https://www.securityfocus.com/bid/27702/info Managed Workplace Service Center is prone to an information-disclosure vulnerability because the application fails to protect private information. Attackers may exploit this issue to retrieve sensitive information that may aid in further attack...
