Cross site scripting

Cross-site scripting XSS vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-4051...

CVE-2013-4051

CVE-2013-4051 is an XSS vulnerability in IBM Domino Web Administrator (webadmin.nsf) affecting Domino 8.5 and 9.0. It allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The related CVE-2013-4055 is a separate XSS in the same component. Public exploit...

CVE-2013-4050

IBM Domino Web Administrator (webadmin.nsf) on Domino 8.5.x and 9.0.x is affected by a Cross-Site Request Forgery (CSRF) vulnerability that allows a remote authenticated user to hijack the authentication of unspecified victims via unknown vectors. The initial sources do not provide a concrete exp...

CVE-2013-4050: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

PT-2013-4817

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5 through 9.0 Description A cross-site request forgery CSRF issue exists in the webadmin.nsf component of the Domino Web Administrator. This allows remote authenticated users to hijack the authentication of other users vi...

PT-2013-4821

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5 through 9.0 Description A cross-site scripting XSS issue exists in the webadmin.nsf component of the Domino Web Administrator, allowing remote authenticated users to inject arbitrary web script or HTML. This can be...

PT-2013-4818

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5 through 9.0 Description A cross-site scripting XSS issue exists in the webadmin.nsf component of the Domino Web Administrator, allowing remote authenticated users to inject arbitrary web script or HTML. This is achieved...