PT-2008-6179 · Ibm · Lotus

Publicado 2008-11-10 · Atualizado 2017-08-08 · CVE-2008-5011

NVD

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to qpconfig sample.xml, aka SPR CWIR7KMPVP and THES7F9NVR, a different vulnerability than CVE-2008-2163 and CVE-2008-3860.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-5011

Produtos afetados

Lotus

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-5011 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46463 · Nota
• http://osvdb.org/49777 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg27013341 · Correção
• http://secunia.com/advisories/32574 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/3081 · Nota
• http://osvdb.org/49778 · Nota
• http://securityfocus.com/bid/32212 · Nota