Description
Cross-site scripting (XSS) vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "address book and user list functions."
References
- http://cs.cybozu.co.jp/information/20100816notice05.php
- 44992 third-party-advisory
- 45050 third-party-advisory
- 73320 vdb-entry
- 48446 vdb-entry
- JVNDB-2011-000047 third-party-advisory
- JVN#55508059 third-party-advisory