Scriptjunkie scriptjunkie1 {nospam} googlemail {nospam} comZDI-10-135Novell Groupwise WebAccess Multiple Cross-Site Scripting Vulnerabilities
0.005 Low
EPSS
Percentile
75.9%
This vulnerability allows remote attackers to execute arbitrary client side script on vulnerable installations of Novell Groupwise WebAccess. Authentication is notrequired to exploit this vulnerability. The specific flaw exists within handling html messages sent to a Novell GroupwiseWebAccess user. Messages are improperly sanitized allowing client side script to be supplied to the user’s web browser resulting in the user’s WebAccess credentialsbeing compromised.
References
www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7006376&sliceId=2&docTypeID=DT_TID_1_1&dialogID=155271386&stateId=0+0+155267712
www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=7006375&sliceId=2&docTypeID=DT_TID_1_1&dialogID=155271273&stateId=0+0+155267615
Related
