Description
Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) 1.0.4 before FP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-1242.
References
- ADV-2011-0834 vdb-entry
- http://www.ibm.com/support/docview.wss?uid=swg24029060
- IO13663 vendor-advisory
- 43993 third-party-advisory