CVE-2013-0489

CVE-2013-0489 is a CSRF vulnerability in IBM Domino 8.5.x Web Administrator client (webadmin.nsf) that allows remote authenticated users to hijack administrator authentication. Connected sources indicate an exploit path via CSRF leading to potential OS command execution through the Quick Console ...

PT-2013-2381

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5.x Description A cross-site request forgery issue exists in the webadmin.nsf component, also known as the Web Administrator client. This allows remote authenticated users to hijack the authentication of administrators...

CVE-2013-0489: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators...

CVE-2013-0488: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Stack overflow

Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPostRequest OpenForm action to WebAdmin.nsf...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Lotus Domino 8.5.2 allows remote attackers to inject arbitrary web script or HTML via the PanelIcon parameter in an fmpgPanelHeader ReadForm action to WebAdmin.nsf...

CVE-2011-3575

Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPostRequest OpenForm action to WebAdmin.nsf...

CVE-2011-3575

IBM Lotus Domino 8.5.x (specifically 8.5.2 referenced in CVE-2011-3575) is affected by a stack-based buffer overflow in the NSFComputeEvaluateExt function of Nnotes.dll. The vulnerability allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPo...

PT-2011-4537

Name of the Vulnerable Software and Affected Versions IBM Lotus Domino version 8.5.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PanelIcon parameter in an "fmpgPanelHeader ReadForm" action to "WebAdmin.nsf". Recommendations F...

CVE-2011-3576: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Lotus Domino 8.5.2 allows remote attackers to inject arbitrary web script or HTML via the PanelIcon parameter in an fmpgPanelHeader ReadForm action to WebAdmin.nsf...

PT-2011-4536

Name of the Vulnerable Software and Affected Versions IBM Lotus Domino version 8.5.2 Description The issue is related to a stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll. This allows remote authenticated users to execute arbitrary code via a long tHPRAgentName...

Lotus Domino HPRAgentName Stack Overflow

Added: 07/08/2011 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem The WebAdmin.nsf resource on the Domino web service contains a buffer overflow vulnerability. Resolution No patch is available at this time. References Limitations This exploit...

Lotus Domino HPRAgentName Stack Overflow

Added: 07/08/2011 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem The WebAdmin.nsf resource on the Domino web service contains a buffer overflow vulnerability. Resolution No patch is available at this time. References...

Lotus Domino HPRAgentName Stack Overflow

Added: 07/08/2011 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem The WebAdmin.nsf resource on the Domino web service contains a buffer overflow vulnerability. Resolution No patch is available at this time. References...

CVE-2004-2310

The CVE-2004-2310 entry concerns Lotus Domino R6 6.5.1, specifically the webadmin.nsf component, which is vulnerable to Cross-site Scripting (XSS). The vulnerability arises from accepting a Domino command via the Quick Console, enabling remote attackers to inject arbitrary web script/HTML. Accord...

CVE-2004-2369

Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a .. dot dot in the directory creation command...

CVE-2004-2311

Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or determine the existence of files via a .. dot dot in the new folder dialog...

CVE-2004-2310: Undefined Security Weakness

Cross-site scripting XSS vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arbitrary web script or HTML via a Domino command in the Quick Console...

CVE-2004-2311: Undefined Security Weakness

Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or determine the existence of files via a .. dot dot in the new folder dialog...

CVE-2004-2369: Undefined Security Weakness

Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a .. dot dot in the directory creation command...