IBM Lotus Domino Notes 6.0/6.5 Mail Template Automatic Script Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14164/info IBM Lotus Notes email client is prone to an input validation vulnerability. Reports indicate that HTML and JavaScript attached to received email messages is executed automatically when the email message is...

ecshop csrf getshell

简要描述： 吐槽下ecshop后台安全性真的太弱了。。前台组合xss来猥琐的让管理员后台getshell 详细说明： 0x0 后台getshell 在includes/clstemplate.php fetch函数 / 处理模板文件 @access public @param string $filename @param sting $cacheid @return sring / function fetch$filename, $cacheid = '' if !$this-seterror errorreportingEALL ^ ENOTICE; $this-seterror+...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 allow remote attackers to inject arbitrary web script or HTML via 1 a URL accessed during use of the Mail template in the WebMail UI or 2 a URL accessed during use of Domino Help through the Domino HTTP...