IBM Lotus Sametime – stconf.nsf Cross-Site Scripting

Exploit Database
144 阅读

作者： Dave Daly

日期： 2011-02-21
类别：
- remote
平台：
- multiple
来源：https://www.exploit-db.com/exploits/35366/

source: https://www.securityfocus.com/bid/46471/info

IBM Lotus Sametime Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

IBM Lotus Sametime 8.0.1 is vulnerable; other versions may also be affected.

http://www.example.com/stconf.nsf/";);} alert("XSS!"); function a(){ var a=unescape("

last Exploits
IBM Lotus Sametime – stconf.nsf Cross-Site Scripting的更多信息

Microsoft Internet Explorer – CMarkup Use-After-Free (MS14-012) (Metasploit)：
Roxio CinePlayer – ActiveX Control Buffer Overflow (Metasploit)：
Zervit Web Server 0.4 – Source Disclosure/Download：
Tuleap – PHP Unserialize Code Execution (Metasploit)：
Ruby on Rails – Dynamic Render File Upload / Remote Code Execution (Metasploit)：
MailCarrier 2.51 – POP3 ‘TOP’ SEH Buffer Overflow：
Disk Savvy Enterprise 10.4.18 – Buffer Overflow (SEH)：
Apache Tomcat – Account Scanner / ‘PUT’ Request Command Execution：