Cross site scripting

Cross-site scripting XSS vulnerability in stcenter.nsf in the server in IBM Lotus Sametime allows remote attackers to inject arbitrary web script or HTML via the authReasonCode parameter in an OpenDatabase action...

CVE-2011-1106

The CVE-2011-1106 entry describes a cross-site scripting (XSS) vulnerability in IBM Lotus Sametime Server’s Lotus Sametime component, specifically related to stcenter.nsf. The underlying issue is that an attacker can supply a crafted authReasonCode parameter in an OpenDatabase action, enabling re...

Re: Domino Sametime Multiple Reflected Cross-Site Scripting

Hi, I discovered similar XSS affecting Domino Sametime some time ago... This XSS affects other scripts also... i.e. stcenter.nsf Here's an example: /stcenter.nsf?OpenDatabase&authReasonCode="scriptalertdocument.cookie;/script" Cheers Andrew...