CVE-2011-3390

Loading...

General

Score:4.3/10.0
Severity:Low
Category:XSS Injection
Exploit:Available

Impact Metrics

Confidentiality:None
Integrity:Partial
Availability:None

Exploitability Metrics

Access Vector:Network
Access Complexity:Medium
Authentication:None

Published on 06/09/11 - Updated on 09/10/18

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in IBM OpenAdmin Tool (OAT) before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the (1) informixserver, (2) host, or (3) port parameter in a login action.

Category: XSS Injection

CWE-79 (Cross-Site Scripting (XSS))
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Security Notices

US National Vulnerability DatabaseCVE-2011-3390
Agence Nationale de la Sécurité des Systèmes d'Information CERTA-2011-AVI-501

Exploits

Exploit-DBEDB-36091
SecurityFocusBID-49364

Relative technologies

VendorProduct
ibmopenadmin_tool

Share this vulnerability with:

Twitter Facebook LinkedIn Mail