CVE-2008-5228

Cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the URI, related to parameters "not being encoded."

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg1PK73108	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PK73933	Patch
http://secunia.com/advisories/32763	Vendor Advisory
http://www.securityfocus.com/bid/32408
http://www.vupen.com/english/advisories/2008/3234
https://exchange.xforce.ibmcloud.com/vulnerabilities/46749

Configuration 1

cpe:2.3:a:ibm:workplace_content_management:6.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:workplace_content_management:6.1:*:*:*:*:*:*:*

---

Published : 2008-11-25 11:30

Updated : 2017-08-08 01:33

---

NVD link : CVE-2008-5228

Mitre link : CVE-2008-5228

No products.

CWE-79