Description
Multiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to de/pda/dev_logon.asp and (2) multiple unspecified vectors in (a) usrmgr/registerAccount.asp, (b) de/create_account.asp, and other files.
References
- http://www.sec-consult.com/289.html
- 34517 vdb-entry
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5005120.html
- ADV-2007-1727 vdb-entry
- 26199 third-party-advisory
- 34516 vdb-entry
- 34515 vdb-entry
- 20070509 SEC Consult SA-20070509-0 :: Multiple vulnerabilites in Nokia Intellisync Mobile Suite & Wireless Email Express mailing-list
- 1018454 vdb-entry
- 25212 third-party-advisory
- 2689 third-party-advisory
- ADV-2007-2657 vdb-entry
- 23889 vdb-entry
- nokia-multiple-scripts-xss(34187) vdb-entry