• info
• discussion
• exploit
• solution
• references

IBM Lotus Domino Src Parameter Cross-Site Scripting Vulnerability

IBM Lotus Domino is prone to a cross-site scripting vulnerability. This is due to insufficient input validation of data supplied through URI parameters.

An attacker may exploit this by enticing a victim user into visiting a malicious link that contains HTML and script code.

Exploitation may permit theft of cookie-based authentication credentials. Other attacks are also possible.