CVE-2006-1384

IBM Tivoli Business Systems Manager <3.1.0.1 - XSS

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-1384. PoCs published by anonymous.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in IBM Tivoli Business Systems Manager due to improper input sanitization. The vulnerability allows arbitrary script execution in the context of the affected site via a crafted URL parameter.

Description

Cross-site scripting (XSS) vulnerability in apwc_win_main.jsp in the web console in IBM Tivoli Business Systems Manager (TBSM) before 3.1.0.1 allows remote attackers to inject arbitrary web script or HTML via the skin parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by anonymous · textwebappsjsp

https://www.exploit-db.com/exploits/27463

View Code ZIP pw:eip

The provided text describes a cross-site scripting (XSS) vulnerability in IBM Tivoli Business Systems Manager due to improper input sanitization. The vulnerability allows arbitrary script execution in the context of the affected site via a crafted URL parameter.

Classification

Writeup 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: IBM Tivoli Business Systems Manager

No auth needed

Prerequisites: Access to the vulnerable application URL

MITRE ATT&CK