Vulnerability Solutions

The WatchMouse Periodic Vulnerability Scan checks for the vulnerability below. To see the most recently added vulnerability solutions that are scanned by WatchMouse, go to the Vulnerability Solutions overview

IBM Multiple Products login.php Query String XSS
Category: CGI abuses : XSS	Risk factor: Medium	Added: 16 Mar 2010
Synopsis: A web application on the remote host has a cross-site scripting vulnerability. Description: The version of IBM WebSphere Portal / IBM Lotus Web Content Management running on the remote host has a cross-site scripting vulnerability. The query string passed to login.php is not properly sanitized. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL, resulting in the execution of arbitrary script code. See also: http://www.hacktics.com/content/advisories/AdvIBM20100224.html http://archives.neohapsis.com/archives/bugtraq/2010-02/0226.html http://www-01.ibm.com/support/docview.wss?uid=swg21421469 Solution: Apply the relevant fix referenced in the IBM advisory. Risk factor: Medium / CVSS Base Score : 4.3 (CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N)