medium4.3Public exploit code
CVE-2004-2310
Cross-site scripting (XSS) vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arbitrary web script or HTML via a Domino c…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM Lotus Domino 6.5.1 - HTTP webadmin.nsf Quick Console Cross-Site Scripting2004-03-17 · remote · windows · Verified
Impact
Cross-site scripting (XSS) vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arbitrary web script or HTML via a Domino command in the Quick Console.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Lotus Domino | Version 6.5.1 |
References
- NVD record
- CVE.org record
- http://members.lycos.co.uk/r34ct/main/ibm_lotus_domino/lotus.txt
- http://secunia.com/advisories/11143
- http://www.osvdb.org/4306
- http://www.securityfocus.com/bid/9901
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15502
- http://members.lycos.co.uk/r34ct/main/ibm_lotus_domino/lotus.txt
- http://secunia.com/advisories/11143
- http://www.osvdb.org/4306
- http://www.securityfocus.com/bid/9901
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15502