vendor:
Lotus Expeditor
by:
SecurityFocus
N/A
CVSS
N/A
Command-Execution
N/A
CWE
Product Name: Lotus Expeditor
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: Unknown
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Unknown
2008
IBM Lotus Expeditor Command-Execution Vulnerability
IBM Lotus Expeditor is prone to a command-execution vulnerability because it fails to properly sanitize input. Successfully exploiting this issue allows remote attackers to execute arbitrary commands in the context of users that follow malicious URIs.
Mitigation:
No known mitigation or remediation for this vulnerability.