packetstormsecurity.com
http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html CVE-2014-3080
IBM GCM16/32 1.20.0.22575 - Multiple Vulnerabilities
Record summary
CVE-2014-3080 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Multiple cross-site scripting (XSS) vulnerabilities on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to kvm.cgi or (2) the key parameter to avctalert.php.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBIBM GCM16/32 1.20.0.22575 - Multiple VulnerabilitiesExploitDB exploitby Alejandro Alvarez BravoNot analyzed1 file
References
720140721 IBM GCM16/32 v1.20.0.22575 vulnerabilitiesmailing list
http://seclists.org/fulldisclosure/2014/Jul/113 34132exploit
http://www.exploit-db.com/exploits/34132 ibm.comConfirmation
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983 68777vdb entry
http://www.securityfocus.com/bid/68777 ibm-gcm-cve20143080-xss(93929)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/93929 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2014-3080