CVE
- Id
- 30978
- CVE No.
- CVE-2008-0861
- Status
- Candidate
- Description
- Cross-site scripting (XSS) vulnerability in leg/Main.nsf in IBM Lotus Quickplace 7.0 allows remote attackers to inject arbitrary web script or HTML via an h_SearchString sub-parameter in the PreSetFields parameter of an EditDocument action.
- Phase
- Assigned (20080220)
- Votes
- None (candidate not yet proposed)
- Comments