CVE-2013-0489

Cross-site request forgery CSRF vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators...

CVE-2013-0489

CVE-2013-0489 is a CSRF vulnerability in IBM Domino 8.5.x Web Administrator client (webadmin.nsf) that allows remote authenticated users to hijack administrator authentication. Connected sources indicate an exploit path via CSRF leading to potential OS command execution through the Quick Console ...

Lotus Domino Web Administrator - Cross Site Command Execution

Application: Lotus Domino Versions Affected: Lotus Domino Web Administrator 6.5 and 8.5.1 Vendor URL: IBM Bugs: CSRF, Command execution Exploits: YES Reported: 22.04.2010 Vendor response: 22.04.2010 Date of Public Advisory: 24.03.2013 Reference: IBM CVE number: CVE-2013-0489 Author: Alexander...