CVE

Id
9870  
CVE No.
CVE-2004-1442  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in db2www CGI interpreter in IBM Net.Data 7 and 7.2 allows remote attackers to inject arbitrary web script or HTML via a macro filename, which is not properly handled by error emssages such as "DTWP001E."  
Phase
Assigned (20050213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
67395 9870 CVE-2004-1442 VULNWATCH:20040126 Secunia Research: IBM Net.Data Macro Name Cross-Site Scripting Vulnerability  View
67396 9870 CVE-2004-1442 URL:http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0019.html  View
67397 9870 CVE-2004-1442 MISC:http://secunia.com/secunia_research/2004-1/advisory/  View
67398 9870 CVE-2004-1442 CERT-VN:VU#197318  View
67399 9870 CVE-2004-1442 URL:http://www.kb.cert.org/vuls/id/197318  View
67400 9870 CVE-2004-1442 CONFIRM:http://www.kb.cert.org/vuls/id/DMOA-5VNPEL  View
67401 9870 CVE-2004-1442 BID:9488  View
67402 9870 CVE-2004-1442 URL:http://www.securityfocus.com/bid/9488  View
67403 9870 CVE-2004-1442 OSVDB:3712  View
67404 9870 CVE-2004-1442 URL:http://www.osvdb.org/3712  View
67405 9870 CVE-2004-1442 SECTRACK:1008845  View
67406 9870 CVE-2004-1442 URL:http://www.securitytracker.com/id?1008845  View
67407 9870 CVE-2004-1442 SECUNIA:10709  View
67408 9870 CVE-2004-1442 URL:http://secunia.com/advisories/10709/  View
67409 9870 CVE-2004-1442 XF:ibm-netdata-db2wwwcomponent-xss(14925)  View

Related JVN