CVE-2008-4507

Affected product: IBM Lotus Quickr 8.1 before Fix Pack 1 (8.1.0.1). Vulnerability: editors can delete pages created by a different author via unspecified vectors. Root cause is not specified in the provided documents. Impact: partial integrity and partial availability risk. Remediation: apply Fix...

CVE-2008-4507

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows editors to delete pages that were created by a different author via unknown vectors...

CVE-2008-4506

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows a place manager to "demote or delete a place superuser group" via unknown vectors...

CVE-2008-4505

Affected software: IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1). Vulnerability: unspecified issue that could allow a denial of service (system crash) via a nonstandard URL argument to the OpenDocument command. Impact: potential system crash; availability impact (CVE description). Status: vend...

CVE-2008-4506

The provided documents do not disclose technical details (affected components, root cause, impact, or exploit vectors) for CVE-2008-4506. Monitor for updates from official advisories (NVD/IBM) and related sources for concrete information.

IBM Quickr拒绝服务和安全绕过漏洞

BUGTRAQ ID: 31608 CNCAN ID：CNCAN-2008100804 IBM Lotus Quickr是一款团队协作软件，能够帮助访问人员、信息和完成任务所需的项目材料。 IBM Lotus Quickr存在多个安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击或绕过部分安全限制。 当把非标准URL参数提交给OpenDocument命令时，存在一个输入验证错误，可导致服务程序崩溃，造成拒绝服务攻击。 第二个问题是place manager存在一个错误可降级或删除一个place超级用户组。 IBM Lotus Quickr 8.0 2 IBM Lotus Quic...

IBM Lotus Domino和Notes多个安全漏洞

BUGTRAQ ID: 16158 Lotus Domino/Notes是集电子邮件、文档数据库、快速应用开发技术以及Web技术为一体的电子邮件与群集平台。 Lotus Domino/Notes中存在多个远程漏洞，可能导致对合法用户的拒绝服务。 IBM Lotus Notes 6.5.4 IBM Lotus Notes 6.5.3 IBM Lotus Notes 6.5.2 IBM Lotus Notes 6.5.1 IBM Lotus Notes 6.5 IBM Lotus Domino Enterprise Server 6.5.4 IBM Lotus Domino Enterpri...

IBM Lotus Quickr多个跨站脚本执行漏洞

CVECAN ID: CVE-2008-3860 IBM Lotus Quickr是一款团队协作软件，能够帮助访问人员、信息和完成任务所需的项目材料。 Lotus Quickr在创建本地组或使用Imported Page添加页面时没有正确地验证某些输入参数，WYSIWYG编辑器、html导入功能和富文本编辑器中也没有正确地过滤某些参数输入便返回给了用户，这允许远程攻击者通过跨站脚本攻击执行任意HTML和脚本代码。 IBM Lotus Quickr 8.1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

IBM Lotus Quickr多个未明跨站脚本漏洞

BUGTRAQ ID:30873 CNCAN ID：CNCAN-2008082905 IBM Lotus Quickr是一款IBM开发的协同文档工具。 IBM Lotus Quickr存在多个未明跨站脚本攻击，远程攻击者可以利用漏洞获得目标用户敏感信息。 目前没有详细漏洞细节提供。 IBM Lotus Quickr 8.1 http://www-01.ibm.com/support/docview.wss?uid=swg27013341...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities 1 in the WYSIWYG editors, 2 during local group creation, 3 during HTML redirects, 4 in the HTML import, 5 in the Rich text editor, and 6 in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inje...

CVE-2008-3860

Multiple cross-site scripting XSS vulnerabilities 1 in the WYSIWYG editors, 2 during local group creation, 3 during HTML redirects, 4 in the HTML import, 5 in the Rich text editor, and 6 in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inje...

CVE-2008-3860

The CVE-2008-3860 entry concerns IBM Lotus Quickr 8.1 for Lotus Domino prior to Hotfix 15, with multiple XSS vulnerabilities across several components (WYSIWYG editors, local group creation, HTML redirects/import, Rich Text editor, and link-page/Imported Page). The root cause is insufficient inpu...

CVE-2008-3860

Multiple cross-site scripting XSS vulnerabilities 1 in the WYSIWYG editors, 2 during local group creation, 3 during HTML redirects, 4 in the HTML import, 5 in the Rich text editor, and 6 in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inje...

Lotus Expeditor cai URI handler command injection

Added: 06/20/2008 CVE: CVE-2008-1965 BID: 28926 OSVDB: 44868 Background Lotus Expeditor is a desktop integration framework used by Lotus products including Lotus Symphony. Problem Lotus Expeditor registers a handler for cai: URIs which passes arbitrary arguments to rcplauncher.exe. This allows...

Lotus Expeditor cai URI handler command injection

Added: 06/20/2008 CVE: CVE-2008-1965 BID: 28926 OSVDB: 44868 Background Lotus Expeditor is a desktop integration framework used by Lotus products including Lotus Symphony. Problem Lotus Expeditor registers a handler for cai: URIs which passes arbitrary arguments to rcplauncher.exe. This allows...

Lotus Expeditor cai URI handler command injection

Added: 06/20/2008 CVE: CVE-2008-1965 BID: 28926 OSVDB: 44868 Background Lotus Expeditor is a desktop integration framework used by Lotus products including Lotus Symphony. Problem Lotus Expeditor registers a handler for cai: URIs which passes arbitrary arguments to rcplauncher.exe. This allows...

Lotus Expeditor cai URI handler command injection

Added: 06/20/2008 CVE: CVE-2008-1965 BID: 28926 OSVDB: 44868 Background Lotus Expeditor is a desktop integration framework used by Lotus products including Lotus Symphony. Problem Lotus Expeditor registers a handler for cai: URIs which passes arbitrary arguments to rcplauncher.exe. This allows...

lotuscore-rfi.txt

phpbb3 Lotus Core CMS v1.0.1 Remote File Include Vulnerabilities Discovered by : Ciph3r MAIL : [email protected] SP TANX4 : Iranian hacker & Kurdish Security TEAM CLASS : remote download cms: http://sourceforge.net/project/showfiles.php?groupid=215112 C0de : include$phpbbrootpath...

Lotus Core CMS 1.0.1 Remote File Inclusion Vulnerabilities

No description provided by source. phpbb3 Lotus Core CMS v1.0.1 Remote File Include Vulnerabilities Discovered by : Ciph3r MAIL : [email protected] SP TANX4 : Iranian hacker & Kurdish Security TEAM CLASS : remote download cms: http://sourceforge.net/project/showfiles.php?groupid=215112 C0d...

Lotus Core CMS 1.0.1 Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Lotus Core CMS 1.0.1 Remote File Inclusion Vulnerabilities ========================================================== phpbb3 Lotus Core CMS v1.0.1 Remote File Include Vulnerabiliti...