Description
IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194451.
Remediation
References
Related Vulnerabilities
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5480)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-2357)
WordPress Plugin Download Plugin Arbitrary Directory Download (1.0.1)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-0800)
WordPress Plugin BuddyPress Global Search Cross-Site Scripting (1.1.0)