This host is running IBM Open Admin Tool and is prone to multiple cross-site scripting vulnerabilities.

Successful exploitation will allow attackers to execute arbitrary HTML and script code in a user's browser session in the context of an affected site and steal the victim's cookie-based authentication credentials. Impact Level: Application.

Upgrade to IBM OpenAdmin Tool (OAT) version 2.72 or later For updates refer to https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=swg-informixfpd&lang=en_US&S_PKG=dl&cp=UTF-8

The flaws are due to the improper validation of user supplied input via 'host', 'port', 'username', 'userpass' and 'informixserver' parameters in 'index.php'.

IBM OpenAdmin Tool (OAT) version before 2.72

• http://packetstormsecurity.org/files/view/104617/ibmopenadmin-xss.txt
• http://voidroot.blogspot.com/2011/08/xss-in-ibm-open-admin-tool.html
• http://www.securityfocus.com/archive/1/archive/1/519468/100/0/threaded
• http://xforce.iss.net/xforce/xfdb/69488

---

Updated on 2015-03-25