199 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix 3 for i5/OS, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to "WYSIWYG editors."...
CVE-2008-2163
Cross-site scripting XSS vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix 3 for i5/OS, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to "WYSIWYG editors."...
CVE-2008-2163
IBM Lotus Quickr 8.1 is affected by CVE-2008-2163: an XSS vulnerability in the WYSIWYG editors that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. The issue affects Quickr 8.1 before Hotfix 5 on Windows and AIX, and before Hotfix 3 on i5/OS. Remediation is to ...
CVE-2008-2163
Cross-site scripting XSS vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix 3 for i5/OS, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to "WYSIWYG editors."...
CVE-2008-2163: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix 3 for i5/OS, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to "WYSIWYG editors."...
Cross site scripting
IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting XSS attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a...
CVE-2008-1216
IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting XSS attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a...
CVE-2008-1216
CVE-2008-1216 affects IBM Lotus Quickr 8.0 server (and possibly QuickPlace 7.x). The vulnerability arises from improper handling of URIs containing XSS attack strings in a Calendar OpenDocument action to main.nsf, where a Count parameter may carry a JavaScript event within a malformed element, en...
CVE-2008-1216
IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting XSS attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a...
CVE-2008-1216: Improper Input Validation
IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting XSS attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a...
IBM Quickr 8 Calendar Xss Injection (Bypass Quickr 8.0 Xss Filter)
description:Lotus Quickr, announced at Lotusphere 2007, is an evolution of Lotus QuickPlace ,The software use a weak xss filter that an attacker can bypass this xss filter. A remote user can create a specially crafted URL that, when loaded by a target user, will cause arbitrary scripting code to ...
lotusquickr-xss.txt
description:Lotus Quickr, announced at Lotusphere 2007, is an evolution of Lotus QuickPlace ,The software use a weak xss filter that an attacker can bypass this xss filter. A remote user can create a specially crafted URL that, when loaded by a target user, will cause arbitrary scripting code to ...
IBM Lotus Quickr QuickPlace Server 8.0 - Calendar Count Cross-Site Scripting
IBM Lotus Quickr QuickPlace Server 8.0 - Calendar Count Cross-Site Scripting source: https://www.securityfocus.com/bid/27925/info IBM Lotus Quickr is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this...
IBM Lotus Quickr QuickPlace Server 8.0 - Calendar 'Count' Cross-Site Scripting
source: https://www.securityfocus.com/bid/27925/info IBM Lotus Quickr is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...
Cross site scripting
Cross-site scripting XSS vulnerability in Lotus Quickr for i5/OS before 8.0.0.2 Hotfix 11, when anonymous access is disabled on HTTP ports, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-0834
Cross-site scripting XSS vulnerability in Lotus Quickr for i5/OS before 8.0.0.2 Hotfix 11, when anonymous access is disabled on HTTP ports, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-0834
Cross-site scripting XSS vulnerability in Lotus Quickr for i5/OS before 8.0.0.2 Hotfix 11, when anonymous access is disabled on HTTP ports, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-0834
CVE-2008-0834 is a cross-site scripting (XSS) vulnerability in IBM’s Lotus Quickr for i5/OS prior to 8.0.0.2 Hotfix 11. When anonymous access on HTTP ports is disabled, remote attackers can inject arbitrary web script or HTML via unspecified vectors. The incident is documented with a CVSS base sc...
CVE-2008-0834: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Lotus Quickr for i5/OS before 8.0.0.2 Hotfix 11, when anonymous access is disabled on HTTP ports, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...