CVE-2011-1038: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in stconf.nsf in the server in IBM Lotus Sametime 8.0.1 allow remote attackers to inject arbitrary web script or HTML via 1 the messageString parameter in a WebMessage action or 2 the PATHINFO...

PT-2011-2828

Name of the Vulnerable Software and Affected Versions IBM Lotus Sametime version 8.0.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the stconf.nsf component of the server. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML...