Test ID:	1.3.6.1.4.1.25623.1.0.15514
Category:	CGI abuses
Title:	Lotus Domino XSS (2)
Summary:	NOSUMMARY
Description:	Description: The remote server is vulnerable to cross-site scripting, when requesting a .nsf file with html arguments, as in : GET /FormReflectingURLValue?OpenForm&Field=[XSS] Solution : None at this time Risk factor : Medium
Cross-Ref:	BugTraq ID: 11458 Common Vulnerability Exposure (CVE) ID: CVE-2004-1621 http://www.securityfocus.com/bid/11458 Bugtraq: 20041018 IBM Lotus Notes/Domino fails to encode Square Brackets ( [ ] ) (Google Search) http://marc.info/?l=bugtraq&m=109812960023736&w=2 Bugtraq: 20041021 Re: IBM Lotus Notes/Domino fails to encode Square Brackets ( [ ] ) (Google Search) http://marc.info/?l=bugtraq&m=109841682529328&w=2 CERT/CC vulnerability note: VU#404382 http://www.kb.cert.org/vuls/id/404382 http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21187833 http://securitytracker.com/id?1011779 http://secunia.com/advisories/12891 XForce ISS Database: lotus-notes-xss(17758) https://exchange.xforce.ibmcloud.com/vulnerabilities/17758
Copyright	This script is Copyright (C) 2004 Tenable Network Security

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.