 |
|
|
|
| Vulnerability details : |
| |
 |
|
IBM Cognos TM1 Executive Viewer evserver/createcontrol.js Unspecified XSS |
|
|
Fiche créée le 2012-01-10 01:12:07, dernière mise à jour le 2012-01-28 08:15:17
IBM Cognos TM1 Executive Viewer contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate certain unspecified input upon submission to the evserver/createcontrol.js script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.
|
| |
| |
| |
| External refs : |
| OSVDB 78216 |
| |
| |
| |
| |
|
|
|
|
| Free consultation (search) |
|
|
|
|
|
| |
|
|
|
