NVD

Id
1176  
Name
CVE-2008-1216  
Description
IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting (XSS) attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a JavaScript event in a malformed element, as demonstrated by an onload event in an IFRAME element.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-03-08  
Modified Date
2011-03-07  
Seq
2008-1216  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
7341 1176 CVE-2008-1216 3721  View
7342 1176 CVE-2008-1216 20080222 IBM Quickr 8 Calendar Xss Injection (Bypass Quickr 8.0 Xss Filter)  View
7343 1176 CVE-2008-1216 27925  View
7344 1176 CVE-2008-1216 ADV-2008-0667  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48886 JVNDB-2008-004196 IBM Lotus Quickr サーバにおける任意の Web スクリプトなどを挿入される脆弱性 IBM Lotus Quickr サーバおよび QuickPlace は、クロスサイトスクリプティング (XSS) 攻撃の文字列を含む URI を適切に識別しないため、任意の Web スクリプトまたは HTML を挿入される脆弱性が存在します。 CVE-2008-1216 31329 CVE-2008-1216 1176 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004196.html 2008-03-08 2012-09-25 View