medium4.3Public exploit code
CVE-2006-1384
Cross-site scripting (XSS) vulnerability in apwc_win_main.jsp in the web console in IBM Tivoli Business Systems Manager (TBSM) before 3.1.0.1 allows remote att…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM Tivoli Business Systems Manager 3.1 - APWC_Win_Main.jsp Cross-Site Scripting2006-03-23 · webapps · jsp · Verified
Impact
Cross-site scripting (XSS) vulnerability in apwc_win_main.jsp in the web console in IBM Tivoli Business Systems Manager (TBSM) before 3.1.0.1 allows remote attackers to inject arbitrary web script or HTML via the skin parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Tivoli Business Systems Manager | Version 3.1 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/19332
- http://securitytracker.com/id?1015822
- http://www-1.ibm.com/support/docview.wss?uid=swg1OA14904
- http://www.osvdb.org/24069
- http://www.securityfocus.com/bid/17210
- http://www.vupen.com/english/advisories/2006/1073
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25412
- http://secunia.com/advisories/19332
- http://securitytracker.com/id?1015822
- http://www-1.ibm.com/support/docview.wss?uid=swg1OA14904
- http://www.osvdb.org/24069
- http://www.securityfocus.com/bid/17210
- http://www.vupen.com/english/advisories/2006/1073
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25412