← Database

CVE-2008-0861

MEDIUM CVSS: 4.3 Published: 2008-02-21 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in leg/Main.nsf in IBM Lotus Quickplace 7.0 allows remote attackers to inject arbitrary web script or HTML via an h_SearchString sub-parameter in the PreSetFields parameter of an EditDocument action.

Affected Platforms

Ibm Lotus Quickplace

Weakness Type

CWE-79

References