CVE-2009-3469

Cross-site scripting XSS vulnerability in profiles/html/simpleSearch.do in IBM Lotus Connections 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in profiles/html/simpleSearch.do in IBM Lotus Connections 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2009-3469

CVE-2009-3469 describes a cross-site scripting (XSS) vulnerability in IBM Lotus Connections 2.0.1, specifically in the component profiles/html/simpleSearch.do via the name parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The public descriptions consistently cit...

CVE-2009-3469

Cross-site scripting XSS vulnerability in profiles/html/simpleSearch.do in IBM Lotus Connections 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Quickr 8.1.0 services for WebSphere Portal allow remote attackers to inject arbitrary web script or HTML via the filename of a .odt file in a Lotus Quickr place, related to the Library template...

CVE-2009-3453

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Quickr 8.1.0 services for WebSphere Portal allow remote attackers to inject arbitrary web script or HTML via the filename of a .odt file in a Lotus Quickr place, related to the Library template...

CVE-2009-3453

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Quickr 8.1.0 services for WebSphere Portal allow remote attackers to inject arbitrary web script or HTML via the filename of a .odt file in a Lotus Quickr place, related to the Library template...

CVE-2009-3453

CVE-2009-3453 affects IBM Lotus Quickr 8.1.0 services for WebSphere Portal. The vulnerability is a cross-site scripting (XSS) flaw triggered by the filename of a .odt file in a Lotus Quickr place (Library template), allowing remote attackers to inject arbitrary web script or HTML. According to th...

IBM Lotus Connections 2.0.1 - simpleSearch.do Cross-Site Scripting

IBM Lotus Connections 2.0.1 - simpleSearch.do Cross-Site Scripting source: https://www.securityfocus.com/bid/36513/info IBM Lotus Connections is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

IBM Lotus Connections 2.0.1 - 'simpleSearch.do' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36513/info IBM Lotus Connections is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

IBM Lotus Notes RSS阅读器HTML注入漏洞

BUGTRAQ ID: 36305 Lotus Notes是由IBM开发的集成邮件、日历、即时消息、浏览器和业务协作应用，可用作Lotus Domino服务器应用的桌面客户端。 Lotus Notes提供了一些可由用户选择添加和启用的小工具，其中一个工具是RSS阅读器。这个阅读器下载RSS文件、获取其中的项并本地保存为HTML文件。由于本地保存的文件在Internet Explorer中是以本地Intranet区运行的，因此在解释和显示RSS项时会导致以提升的权限运行其中注入的脚本。 IBM Lotus Notes 8.5 厂商补丁： IBM ---...

IBM Lotus Notes Version Detection (Linux)

This script detects the installed version of IBM Lotus Notes and sets the result in KB item. OpenVAS Vulnerability Test $Id: secpodibmlotusnotesdetectlin.nasl 7823 2017-11-20 08:54:04Z cfischer $ IBM Lotus Notes Version Detection Linux Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...

IBM Lotus Notes Version Detection (Windows)

This script detects the installed version of IBM Lotus Notes and sets the result in KB. OpenVAS Vulnerability Test $Id: secpodibmlotusnotesdetectwin.nasl 5372 2017-02-20 16:26:11Z cfi $ IBM Lotus Notes Version Detection Windows Authors: Antu Sanadi Updated By: Antu Sanadi on 2010-05-04 Updated to...

IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability (Linux)

This host has IBM Lotus Notes installed and is prone to HTML Injection vulnerability. OpenVAS Vulnerability Test $Id: secpodibmlotusnoteshtmlinjvulnlin.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability Linux Authors: Antu Sanadi Copyright:...

IBM Lotus Notes Detection (Linux/Unix SSH Login)

This script detects the installed version of IBM Lotus Notes item. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Notes Detection (Windows SMB Login)

This script detects the installed version of IBM Lotus Notes. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability (Windows)

This host has IBM Lotus Notes installed and is prone to HTML Injection vulnerability. OpenVAS Vulnerability Test $Id: secpodibmlotusnoteshtmlinjvulnwin.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability Windows Authors: Antu Sanadi Copyright:...

IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability - Linux

IBM Lotus Notes is prone to a HTML Injection vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability - Windows

IBM Lotus Notes is prone to a HTML Injection vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows remote attackers to execute arbitrary script in Internet Explorer's Local Machine Zone via a crafted feed, aka SPR RGAU7RDJ9K...