CVE-2009-3453

CVE-2009-3453 affects IBM Lotus Quickr 8.1.0 services for WebSphere Portal. The vulnerability is a cross-site scripting (XSS) flaw triggered by the filename of a .odt file in a Lotus Quickr place (Library template), allowing remote attackers to inject arbitrary web script or HTML. According to th...

CVE-2009-3453

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Quickr 8.1.0 services for WebSphere Portal allow remote attackers to inject arbitrary web script or HTML via the filename of a .odt file in a Lotus Quickr place, related to the Library template...

CVE-2008-5011

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to qpconfigsample.xml, aka SPR CWIR7KMPVP and THES7F9NVR, a different...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to qpconfigsample.xml, aka SPR CWIR7KMPVP and THES7F9NVR, a different...

CVE-2008-5011

CVE-2008-5011 describes multiple XSS vulnerabilities in IBM Lotus Quickr 8.1 before 8.1.0.2 for Lotus Domino, allowing remote injection of arbitrary scripts via unspecified vectors (possibly related to qpconfig_sample.xml; associated SPR CWIR7KMPVP and THES7F9NVR). The connected documents confirm...

CVE-2008-5011

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to qpconfigsample.xml, aka SPR CWIR7KMPVP and THES7F9NVR, a different...

CVE-2008-4507

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows editors to delete pages that were created by a different author via unknown vectors...

CVE-2008-4506

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows a place manager to "demote or delete a place superuser group" via unknown vectors...

CVE-2008-4505

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 might allow attackers to cause a denial of service system crash via a "nonstandard URL argument" to the OpenDocument command. NOTE: due to lack of details from the vendor, it is not clear whether this is a vulnerability...

Design/Logic Flaw

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows a place manager to "demote or delete a place superuser group" via unknown vectors...

Command injection

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 might allow attackers to cause a denial of service system crash via a "nonstandard URL argument" to the OpenDocument command. NOTE: due to lack of details from the vendor, it is not clear whether this is a vulnerability...

Code injection

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows editors to delete pages that were created by a different author via unknown vectors...

CVE-2008-4505

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 might allow attackers to cause a denial of service system crash via a "nonstandard URL argument" to the OpenDocument command. NOTE: due to lack of details from the vendor, it is not clear whether this is a vulnerability...

CVE-2008-4505

Affected software: IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1). Vulnerability: unspecified issue that could allow a denial of service (system crash) via a nonstandard URL argument to the OpenDocument command. Impact: potential system crash; availability impact (CVE description). Status: vend...

CVE-2008-4506

The provided documents do not disclose technical details (affected components, root cause, impact, or exploit vectors) for CVE-2008-4506. Monitor for updates from official advisories (NVD/IBM) and related sources for concrete information.

CVE-2008-4507

Affected product: IBM Lotus Quickr 8.1 before Fix Pack 1 (8.1.0.1). Vulnerability: editors can delete pages created by a different author via unspecified vectors. Root cause is not specified in the provided documents. Impact: partial integrity and partial availability risk. Remediation: apply Fix...

CVE-2008-4507

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows editors to delete pages that were created by a different author via unknown vectors...

CVE-2008-4506

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows a place manager to "demote or delete a place superuser group" via unknown vectors...

IBM Quickr拒绝服务和安全绕过漏洞

BUGTRAQ ID: 31608 CNCAN ID：CNCAN-2008100804 IBM Lotus Quickr是一款团队协作软件，能够帮助访问人员、信息和完成任务所需的项目材料。 IBM Lotus Quickr存在多个安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击或绕过部分安全限制。 当把非标准URL参数提交给OpenDocument命令时，存在一个输入验证错误，可导致服务程序崩溃，造成拒绝服务攻击。 第二个问题是place manager存在一个错误可降级或删除一个place超级用户组。 IBM Lotus Quickr 8.0 2 IBM Lotus Quic...

IBM Lotus Quickr多个跨站脚本执行漏洞

CVECAN ID: CVE-2008-3860 IBM Lotus Quickr是一款团队协作软件，能够帮助访问人员、信息和完成任务所需的项目材料。 Lotus Quickr在创建本地组或使用Imported Page添加页面时没有正确地验证某些输入参数，WYSIWYG编辑器、html导入功能和富文本编辑器中也没有正确地过滤某些参数输入便返回给了用户，这允许远程攻击者通过跨站脚本攻击执行任意HTML和脚本代码。 IBM Lotus Quickr 8.1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...