CVE-2012-4848

https://notcve.org/view.php?id=CVE-2012-4848

Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Foundations Start before 1.2.2c allow remote authenticated users to inject arbitrary web script or HTML via a Webconfig Users user-attribute field, as demonstrated by the (1) First Name or (2) Last Name field. Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados (XSS) en IBM Lotus Foundations Start antes de v1.2.2c permiten a usuarios remotos autenticados inyectar secuencias de comandos web o HTML a través de un campo de atributo de usuario de WebConfig Users, tal y como se demostró por el campo (1) First Name o (2) Last Name. • http://www.ibm.com/support/docview.wss?uid=swg21620319 https://exchange.xforce.ibmcloud.com/vulnerabilities/79537 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •