CVE-2008-0861

CVE-2008-0861 describes a cross-site scripting (XSS) vulnerability in IBM Lotus Quickplace 7.0, specifically in leg/Main.nsf. An attacker can inject arbitrary web script or HTML through an h_SearchString sub-parameter inside the PreSetFields parameter of an EditDocument action. The NVD entry list...