CVE-2006-2431

23Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendepss 3.0%

de la publicación al arma180 días

Publicada en NVD17 may

1ª PoC+180d

probabilidad de explotación

3.0%top 14% de las CVE

explotación observada

noninguna fuente lo reporta

1 exploit(s) público(s)

Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7, allows remote attackers to inject arbitrary web script or HTML via the URI, which is contained in a FAULTACTOR element on this page. NOTE: some sources have reported the element as "faultfactor," but this is likely erroneous.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28981

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html http://secunia.com/advisories/20032 http://securityreason.com/securityalert/910 http://securitytracker.com/id?1017170 https://exchange.xforce.ibmcloud.com/vulnerabilities/30055 http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK16492&uid=swg1PK22416&loc=en_US&cs=utf-8&lang=http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012064 http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012163 http://www-1.ibm.com/support/search.wss?rs=0&q=PK16602&apar=only http://www-1.ibm.com/support/search.wss?rs=0&q=PK26181&apar=only http://www.attrition.org/pipermail/vim/2006-November/001112.html http://www.niscc.gov.uk/niscc/docs/re-20061031-00727.pdf?lang=en