Unscored CVE-2008-5228 EUVD-2008-5205GHSA-6rxv-cp55-755v

Cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1 before CF8, when a Page Navigation Componen…

Published Nov 25, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the URI, related to parameters "not being encoded."

References

PK73933 vendor-advisory
32408 vdb-entry
ibm-lotus-workplace-navigation-xss(46749) vdb-entry
ADV-2008-3234 vdb-entry
PK73108 vendor-advisory
32763 third-party-advisory