Description
Cross-site scripting (XSS) vulnerability in Lotus Domino iNotes Client 6.5.4 allows remote attackers to inject arbitrary web script or HTML via email with attached html files, which are directly rendered in the browser.
References
- http://secunia.com/secunia_research/2005-38/advisory/
- ADV-2006-0499 vdb-entry
- http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229919
- domino-webaccess-subject-xss(24612) vdb-entry
- 23077 vdb-entry
- 16577 vdb-entry
- 16340 third-party-advisory
- 1015610 vdb-entry