Unscored CVE-2011-2661 EUVD-2011-2644GHSA-gc24-8cqq-cq5c

Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 8.0 before HP3 allow remote attackers to inject arbitr…

Published Oct 8, 2011 · Updated Sep 16, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 8.0 before HP3 allow remote attackers to inject arbitrary web script or HTML via the (1) Directory.Item.name or (2) Directory.Item.displayName parameter.

References

https://bugzilla.novell.com/show_bug.cgi?id=702786
http://www.novell.com/support/viewContent.do?externalId=7009214