CVE-2013-6720

IBM Tealeaf Customer Experience is vulnerable to a Local File Inclusion (LFI) flaw in the Passive Capture Application (PCA) web console. The vulnerability exists in the download.php component (PHP builds 3611 and 3620) of versions 7.x, 8.x through 8.6, 8.7 before FP2, and 8.8 before FP2. A remote...

CVE-2013-6719

IBM Tealeaf Customer Experience (versions 7.x, 8.0-8.8) is vulnerable to Remote OS Command Injection in the Passive Capture Application (PCA) web console. The flaw exists in delivery.php due to improper filtering of user-supplied input in the testconn_host parameter, allowing an attacker to execu...