OSVDB: Open Sourced Vulnerability Database

Creditee: Jan Fry

Known Contact Information:

None at this time

Known Affiliations:

ProCheckUp (as of 2010-12-21)

Disclosed Vulnerabilities (6):

Disc. Date	OSVDB ID	Title
2011-05-05	72371	BMC Dashboards for BSM bmc_help2u/help_services/html URI XSS
2011-05-05	72372	BMC Dashboards for BSM bmc_help2u/servlet/helpServlet2u msg Parameter XSS
2011-05-05	72373	BMC Dashboards for BSM bsmdashboards/messagebroker/amfsecure XSS
2011-05-05	72374	BMC Dashboards for BSM Bundled Adobe BlazeDS Traversal Arbitrary File Upload
2011-05-05	72375	BMC Dashboards for BSM bmc_help2u/help_services/html/index.htm URL Parameter Spoofing Weakness
2010-12-21	69934	Mitel Audio and Web Conferencing (AWC) awcuser/cgi-bin/vcs xsl Parameter Arbitrary Command Injection

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.