CVE-2010-4120

The exploit demonstrates a reflected XSS vulnerability in IBM Tivoli Access Manager for e-business 6.1.0 by injecting a malicious script via the 'method' parameter in the URL. The PoC uses a simple JavaScript alert to confirm the vulnerability.

The exploit demonstrates a reflected XSS vulnerability in IBM Tivoli Access Manager by injecting a script tag into the 'method' parameter of the '/ibm/wpm/os' endpoint. The lack of input sanitization allows arbitrary JavaScript execution in the context of the affected site.

The exploit demonstrates a reflected XSS vulnerability in IBM Tivoli Access Manager by injecting a script tag into the 'method' parameter of the user endpoint. The payload executes arbitrary JavaScript in the context of the affected site.

The exploit demonstrates a reflected XSS vulnerability in IBM Tivoli Access Manager by injecting a malicious script via the 'method' parameter in the URL. The PoC triggers an alert box, proving arbitrary JavaScript execution in the context of the affected site.

The exploit demonstrates a reflected XSS vulnerability in IBM Tivoli Access Manager by injecting a malicious script via the 'method' parameter in the URL. The payload triggers an alert box, confirming the vulnerability.

The exploit demonstrates a reflected XSS vulnerability in IBM Tivoli Access Manager for e-business 6.1.0 by injecting a script tag into the 'method' parameter of the 'gsogroup' endpoint. The payload executes arbitrary JavaScript in the context of the affected site.

The exploit demonstrates a reflected XSS vulnerability in IBM Tivoli Access Manager for e-business 6.1.0 by injecting a script tag into the 'method' parameter of the '/ibm/wpm/acl' endpoint. The lack of input sanitization allows arbitrary JavaScript execution in the context of the affected site.

The exploit demonstrates a reflected XSS vulnerability in IBM Tivoli Access Manager for e-business 6.1.0 by injecting a malicious script into the 'method' parameter of the '/ibm/wpm/gso' endpoint. The PoC URL triggers an alert box, confirming the vulnerability.

The exploit demonstrates a reflected XSS vulnerability in IBM Tivoli Access Manager for e-business 6.1.0 by injecting a script tag into the 'method' parameter of the '/ibm/wpm/group' endpoint. The payload executes arbitrary JavaScript in the context of the affected site.

The exploit demonstrates a reflected XSS vulnerability in IBM Tivoli Access Manager for e-business 6.1.0 by injecting a malicious script via the 'method' parameter in the URL. The PoC shows how arbitrary JavaScript can be executed in the context of the affected site.

The exploit demonstrates a reflected XSS vulnerability in IBM Tivoli Access Manager for e-business by injecting a script tag via the 'parm1' parameter. The payload triggers an alert box, confirming the vulnerability.