Computer Security
[EN] securityvulns.ru no-pyccku


IBM Lotus Domino Sametime crossite scripting
Published:22.02.2011
Source:
SecurityVulns ID:11453
Type:remote
Threat Level:
5/10
Description:stconf.nsf crossite scripting
Affected:IBM : Lotus Domino Sametime 8.0
CVE:CVE-2011-1038 (Multiple cross-site scripting (XSS) vulnerabilities in stconf.nsf in the server in IBM Lotus Sametime 8.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the messageString parameter in a WebMessage action or (2) the PATH_INFO.)
Original documentdocumentbarkley_(at)_usa.net, Re: Domino Sametime Multiple Reflected Cross-Site Scripting (22.02.2011)
 documentdavid.daly_(at)_dionach.com, Domino Sametime Multiple Reflected Cross-Site Scripting (22.02.2011)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod