Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting (XSS) attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a JavaScript event in a malformed element, as demonstrated by an onload event in an IFRAME element.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Lotus Quickr 跨站脚本漏洞
Vulnerability Description
IBM Lotus Quickr 是一款团队协作软件，它能够帮助您访问人员、信息和完成任务所需的项目材料。 IBM Lotus Quickr 8.0服务器和可能QuickPlace 7.x版本，没有正确的确认包含跨站脚本攻击字符串的URIs，远程攻击者可以借助对main.nsf的Calendar OpenDocument操作，注入任意的Web脚本或HTML。main.nsf带有一个COUNT参数，而该参数包含了畸形的元件中的一个JavaScript事件，比如IFRAME事件中的装载事件。
CVSS Information
N/A
Vulnerability Type
N/A