20110222 Re: Domino Sametime Multiple Reflected Cross-Site Scriptingmailing list
http://archives.neohapsis.com/archives/bugtraq/2011-02/0217.html CVE-2011-1106
IBM Lotus Sametime Server 8.0 - 'stcenter.nsf' Cross-Site Scripting
Record summary
CVE-2011-1106 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in stcenter.nsf in the server in IBM Lotus Sametime allows remote attackers to inject arbitrary web script or HTML via the authReasonCode parameter in an OpenDatabase action.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBIBM Lotus Sametime Server 8.0 - 'stcenter.nsf' Cross-Site ScriptingExploitDB exploitby andrewNot analyzed1 file
References
543430Third-party advisory
http://secunia.com/advisories/43430 46481vdb entry
http://www.securityfocus.com/bid/46481 sametime-stcenter-xss(65555)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/65555 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2011-1106