Description

Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511.

Remediation

References

CVE-2011-2606

Related Vulnerabilities

SugarCRM Other Vulnerability (CVE-2005-0266)

Oracle Database Server CVE-2012-0519 Vulnerability (CVE-2012-0519)

WordPress Plugin Zingiri Web Shop Multiple Cross-Site Scripting and SQL Injection Vulnerabilities (2.3.5)

WordPress Plugin ImageLinks Interactive Image Builder for WordPress Cross-Site Scripting (1.5.2)

WordPress Plugin Feed Changer & Remover Cross-Site Scripting (0.2)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2011-2606