2 matches found
Cross site scripting
IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting XSS attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a...
6.8CVSS5.8AI score0.01824EPSS
SaveExploits0References5Affected Software1
CVE-2008-1216
IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting XSS attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a...
5.5AI score0.01824EPSS
SaveExploits0References5
20