CVE-2006-1384

Cross-site scripting (XSS) vulnerability in apwc_win_main.jsp in the web console in IBM Tivoli Business Systems Manager (TBSM) before 3.1.0.1 allows remote attackers to inject arbitrary web script or HTML via the skin parameter.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2006-03-24

Last modified

2024-08-07

Affected products

• Tivoli Business Systems Manager (Ibm)

References

• http://secunia.com/advisories/19332
• http://securitytracker.com/id?1015822
• http://www-1.ibm.com/support/docview.wss?uid=swg1OA14904
• http://www.osvdb.org/24069
• http://www.securityfocus.com/bid/17210
• http://www.vupen.com/english/advisories/2006/1073
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25412