Command injection

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 might allow attackers to cause a denial of service system crash via a "nonstandard URL argument" to the OpenDocument command. NOTE: due to lack of details from the vendor, it is not clear whether this is a vulnerability...

Design/Logic Flaw

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows a place manager to "demote or delete a place superuser group" via unknown vectors...

Code injection

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows editors to delete pages that were created by a different author via unknown vectors...

CVE-2008-4505

Affected software: IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1). Vulnerability: unspecified issue that could allow a denial of service (system crash) via a nonstandard URL argument to the OpenDocument command. Impact: potential system crash; availability impact (CVE description). Status: vend...

CVE-2008-4507

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows editors to delete pages that were created by a different author via unknown vectors...

CVE-2008-4507

Affected product: IBM Lotus Quickr 8.1 before Fix Pack 1 (8.1.0.1). Vulnerability: editors can delete pages created by a different author via unspecified vectors. Root cause is not specified in the provided documents. Impact: partial integrity and partial availability risk. Remediation: apply Fix...

CVE-2008-4505

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 might allow attackers to cause a denial of service system crash via a "nonstandard URL argument" to the OpenDocument command. NOTE: due to lack of details from the vendor, it is not clear whether this is a vulnerability...

CVE-2008-4506

The provided documents do not disclose technical details (affected components, root cause, impact, or exploit vectors) for CVE-2008-4506. Monitor for updates from official advisories (NVD/IBM) and related sources for concrete information.

CVE-2008-4506

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows a place manager to "demote or delete a place superuser group" via unknown vectors...

CVE-2008-4505: Improper Input Validation

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 might allow attackers to cause a denial of service system crash via a "nonstandard URL argument" to the OpenDocument command. NOTE: due to lack of details from the vendor, it is not clear whether this is a vulnerability...

CVE-2008-4506: Undefined Security Weakness

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows a place manager to "demote or delete a place superuser group" via unknown vectors...

CVE-2008-4507: Undefined Security Weakness

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows editors to delete pages that were created by a different author via unknown vectors...

IBM Quickr拒绝服务和安全绕过漏洞

BUGTRAQ ID: 31608 CNCAN ID：CNCAN-2008100804 IBM Lotus Quickr是一款团队协作软件，能够帮助访问人员、信息和完成任务所需的项目材料。 IBM Lotus Quickr存在多个安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击或绕过部分安全限制。 当把非标准URL参数提交给OpenDocument命令时，存在一个输入验证错误，可导致服务程序崩溃，造成拒绝服务攻击。 第二个问题是place manager存在一个错误可降级或删除一个place超级用户组。 IBM Lotus Quickr 8.0 2 IBM Lotus Quic...

IBM Lotus Quickr多个跨站脚本执行漏洞

CVECAN ID: CVE-2008-3860 IBM Lotus Quickr是一款团队协作软件，能够帮助访问人员、信息和完成任务所需的项目材料。 Lotus Quickr在创建本地组或使用Imported Page添加页面时没有正确地验证某些输入参数，WYSIWYG编辑器、html导入功能和富文本编辑器中也没有正确地过滤某些参数输入便返回给了用户，这允许远程攻击者通过跨站脚本攻击执行任意HTML和脚本代码。 IBM Lotus Quickr 8.1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

IBM Lotus Quickr多个未明跨站脚本漏洞

BUGTRAQ ID:30873 CNCAN ID：CNCAN-2008082905 IBM Lotus Quickr是一款IBM开发的协同文档工具。 IBM Lotus Quickr存在多个未明跨站脚本攻击，远程攻击者可以利用漏洞获得目标用户敏感信息。 目前没有详细漏洞细节提供。 IBM Lotus Quickr 8.1 http://www-01.ibm.com/support/docview.wss?uid=swg27013341...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities 1 in the WYSIWYG editors, 2 during local group creation, 3 during HTML redirects, 4 in the HTML import, 5 in the Rich text editor, and 6 in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inje...

CVE-2008-3860

Multiple cross-site scripting XSS vulnerabilities 1 in the WYSIWYG editors, 2 during local group creation, 3 during HTML redirects, 4 in the HTML import, 5 in the Rich text editor, and 6 in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inje...

CVE-2008-3860

Multiple cross-site scripting XSS vulnerabilities 1 in the WYSIWYG editors, 2 during local group creation, 3 during HTML redirects, 4 in the HTML import, 5 in the Rich text editor, and 6 in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inje...

CVE-2008-3860

The CVE-2008-3860 entry concerns IBM Lotus Quickr 8.1 for Lotus Domino prior to Hotfix 15, with multiple XSS vulnerabilities across several components (WYSIWYG editors, local group creation, HTML redirects/import, Rich Text editor, and link-page/Imported Page). The root cause is insufficient inpu...

CVE-2008-3860: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities 1 in the WYSIWYG editors, 2 during local group creation, 3 during HTML redirects, 4 in the HTML import, 5 in the Rich text editor, and 6 in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inje...