CVE-2010-2654

IBM BladeCenter AMM <4.7 and 5.0 - XSS

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-2654. PoCs published by Alexey Sintsov.

AI-analyzed exploit summary The advisory details multiple vulnerabilities in IBM BladeCenter Management Module, including XSS, directory traversal, and unauthorized access. It provides specific exploit URLs and describes the impact of each vulnerability.

Description

Multiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allow remote attackers to inject arbitrary web script or HTML via the (1) INDEX or (2) IPADDR parameter to private/cindefn.php, (3) the domain parameter to private/power_management_policy_options.php, the slot parameter to (4) private/pm_temp.php or (5) private/power_module.php, (6) the WEBINDEX parameter to private/blade_leds.php, or (7) the SLOT parameter to private/ipmi_bladestatus.php.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Alexey Sintsov · textwebappsphp

https://www.exploit-db.com/exploits/14237

View Code ZIP pw:eip

The advisory details multiple vulnerabilities in IBM BladeCenter Management Module, including XSS, directory traversal, and unauthorized access. It provides specific exploit URLs and describes the impact of each vulnerability.

Classification

Writeup 90%

Attack Type

Xss | Info Leak | Auth Bypass

Complexity

Trivial

Reliability

Reliable

Target: IBM BladeCenter Management Module BPET48L and possibly other versions

Auth required

Prerequisites: Network access to the BladeCenter management interface · Authorization for directory listing vulnerability

MITRE ATT&CK