Description
Cross-site scripting (XSS) vulnerability in IBM Rational ClearQuest (CQ) Web 7.0.0.0 allows remote attackers to inject arbitrary web script or HTML via an attachment to a defect log entry.
References
- clearquest-defecttracking-xss(33001) vdb-entry
- 22981 vdb-entry
- 2442 third-party-advisory
- 20070315 IBM Rational ClearQuest Web - Cross Site Scripting mailing-list
- 24523 third-party-advisory
- 1017786 vdb-entry
- 34346 vdb-entry
- ADV-2007-1036 vdb-entry