IBM Lotus Sametime Server stconf.nsf messageString Parameter XSS

The version of Lotus Sametime on the remote host contains a cross-site scripting vulnerability because it fails to sanitize input to the 'messageString' parameter of the 'stconf.nsf' script before including it in a web page. An attacker can leverage this issue by enticing a user to follow a...

IBM Lotus Domino Sametime crossite scripting

stconf.nsf crossite scripting...