• info
• discussion
• exploit
• solution
• references

IBM Tivoli Business Systems Manager APWC_Win_Main.JSP Cross-Site Scripting Vulnerability

This issue can be exploited through a web client.

An example URI has been provided:

http://www.example.com:9443/TbsmWebConsole/help/en/jsp/apwc_win_main.jsp?skin=[XSS]