161 matches found
IBM Lotus Quickr多个未明跨站脚本漏洞
BUGTRAQ ID:30873 CNCAN ID：CNCAN-2008082905 IBM Lotus Quickr是一款IBM开发的协同文档工具。 IBM Lotus Quickr存在多个未明跨站脚本攻击，远程攻击者可以利用漏洞获得目标用户敏感信息。 目前没有详细漏洞细节提供。 IBM Lotus Quickr 8.1 http://www-01.ibm.com/support/docview.wss?uid=swg27013341...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities 1 in the WYSIWYG editors, 2 during local group creation, 3 during HTML redirects, 4 in the HTML import, 5 in the Rich text editor, and 6 in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inje...
CVE-2008-3860
Multiple cross-site scripting XSS vulnerabilities 1 in the WYSIWYG editors, 2 during local group creation, 3 during HTML redirects, 4 in the HTML import, 5 in the Rich text editor, and 6 in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inje...
CVE-2008-3860
Multiple cross-site scripting XSS vulnerabilities 1 in the WYSIWYG editors, 2 during local group creation, 3 during HTML redirects, 4 in the HTML import, 5 in the Rich text editor, and 6 in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inje...
CVE-2008-3860
The CVE-2008-3860 entry concerns IBM Lotus Quickr 8.1 for Lotus Domino prior to Hotfix 15, with multiple XSS vulnerabilities across several components (WYSIWYG editors, local group creation, HTML redirects/import, Rich Text editor, and link-page/Imported Page). The root cause is insufficient inpu...
CVE-2008-2163
Cross-site scripting XSS vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix 3 for i5/OS, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to "WYSIWYG editors."...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix 3 for i5/OS, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to "WYSIWYG editors."...
CVE-2008-2163
IBM Lotus Quickr 8.1 is affected by CVE-2008-2163: an XSS vulnerability in the WYSIWYG editors that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. The issue affects Quickr 8.1 before Hotfix 5 on Windows and AIX, and before Hotfix 3 on i5/OS. Remediation is to ...
CVE-2008-2163
Cross-site scripting XSS vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix 3 for i5/OS, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to "WYSIWYG editors."...
CVE-2008-1216
IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting XSS attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a...
Cross site scripting
IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting XSS attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a...
CVE-2008-1216
IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting XSS attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a...
CVE-2008-1216
CVE-2008-1216 affects IBM Lotus Quickr 8.0 server (and possibly QuickPlace 7.x). The vulnerability arises from improper handling of URIs containing XSS attack strings in a Calendar OpenDocument action to main.nsf, where a Count parameter may carry a JavaScript event within a malformed element, en...
IBM Quickr 8 Calendar Xss Injection (Bypass Quickr 8.0 Xss Filter)
description:Lotus Quickr, announced at Lotusphere 2007, is an evolution of Lotus QuickPlace ,The software use a weak xss filter that an attacker can bypass this xss filter. A remote user can create a specially crafted URL that, when loaded by a target user, will cause arbitrary scripting code to ...
lotusquickr-xss.txt
description:Lotus Quickr, announced at Lotusphere 2007, is an evolution of Lotus QuickPlace ,The software use a weak xss filter that an attacker can bypass this xss filter. A remote user can create a specially crafted URL that, when loaded by a target user, will cause arbitrary scripting code to ...
IBM Lotus Quickr QuickPlace Server 8.0 - Calendar Count Cross-Site Scripting
IBM Lotus Quickr QuickPlace Server 8.0 - Calendar Count Cross-Site Scripting source: https://www.securityfocus.com/bid/27925/info IBM Lotus Quickr is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this...
IBM Lotus Quickr QuickPlace Server 8.0 - Calendar 'Count' Cross-Site Scripting
source: https://www.securityfocus.com/bid/27925/info IBM Lotus Quickr is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...
CVE-2008-0834
Cross-site scripting XSS vulnerability in Lotus Quickr for i5/OS before 8.0.0.2 Hotfix 11, when anonymous access is disabled on HTTP ports, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Lotus Quickr for i5/OS before 8.0.0.2 Hotfix 11, when anonymous access is disabled on HTTP ports, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-0834
CVE-2008-0834 is a cross-site scripting (XSS) vulnerability in IBM’s Lotus Quickr for i5/OS prior to 8.0.0.2 Hotfix 11. When anonymous access on HTTP ports is disabled, remote attackers can inject arbitrary web script or HTML via unspecified vectors. The incident is documented with a CVSS base sc...