CVE-2006-1384

Cross-site scripting (XSS) vulnerability in apwc_win_main.jsp in the web console in IBM Tivoli Business Systems Manager (TBSM) before 3.1.0.1 allows remote attackers to inject arbitrary web script or HTML via the skin parameter.

• http://secunia.com/advisories/19332Exploit, Patch, Vendor Advisory
• http://securitytracker.com/id?1015822
• http://www-1.ibm.com/support/docview.wss?uid=swg1OA14904Exploit, Patch
• http://www.osvdb.org/24069
• http://www.securityfocus.com/bid/17210
• http://www.vupen.com/english/advisories/2006/1073
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25412
• http://secunia.com/advisories/19332Exploit, Patch, Vendor Advisory
• http://securitytracker.com/id?1015822
• http://www-1.ibm.com/support/docview.wss?uid=swg1OA14904Exploit, Patch
• http://www.osvdb.org/24069
• http://www.securityfocus.com/bid/17210
• http://www.vupen.com/english/advisories/2006/1073
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25412

Published

Mar 24, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1378PasswordSafe 3.0 beta, when running on Windows before XP, us…
• CVE-2006-1379Trend Micro PC-cillin Internet Security 2006 14.00.1485 and …
• CVE-2006-1380ISNTSmtp directory in Trend Micro InterScan Messaging Securi…
• CVE-2006-1381Trend Micro OfficeScan 5.5, and probably other versions befo…
• CVE-2006-1382PHP remote file inclusion vulnerability in impex/ImpExData.p…
• CVE-2006-1383Directory traversal vulnerability in Baby FTP Server (BabyFT…
• CVE-2006-1385Stack-based buffer overflow in the parseTaggedData function …
• CVE-2006-1386The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1…
• CVE-2006-1387TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remot…
• CVE-2006-1388Unspecified vulnerability in Microsoft Internet Explorer 6.0…
• CVE-2006-1389Unspecified vulnerability in swagentd in HP-UX B.11.00, B.11…
• CVE-2006-1390The configuration of NetHack 3.4.3-r1 and earlier, Falcon's …