CVE-2009-3469

IBM Lotus Connections 2.0.1 - Cross-Site Scripting via Simple Search Name Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-3469. PoCs published by IBM.

AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in IBM Lotus Connections 2.0.1 by injecting a malicious script via the 'name' parameter in a URL, which executes arbitrary JavaScript in the context of the affected site.

Description

Cross-site scripting (XSS) vulnerability in profiles/html/simpleSearch.do in IBM Lotus Connections 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by IBM · textwebappsjava

https://www.exploit-db.com/exploits/33254

View Code ZIP pw:eip

This exploit demonstrates a cross-site scripting (XSS) vulnerability in IBM Lotus Connections 2.0.1 by injecting a malicious script via the 'name' parameter in a URL, which executes arbitrary JavaScript in the context of the affected site.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: IBM Lotus Connections 2.0.1

No auth needed

Prerequisites: Access to the target application's search functionality

MITRE ATT&CK