QwikSec

Security Database

CVE

CWE

Training

CVE-2009-1762

Published: May 22, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess login page (aka gw/webacc) in Novell GroupWise 7.x before 7.03 HP2 allow remote attackers to inject arbitrary web script or HTML via the (1) GWAP.version or (2) User.Theme (aka User.Theme.index) parameter.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_VUPEN

https://bugzilla.novell.com/show_bug.cgi?id=484942

x_refsource_MISC

third-party-advisory

x_refsource_SECUNIA

http://packetstorm.linuxsecurity.com/0905-exploits/groupwise-xss.txt

x_refsource_MISC

http://www.novell.com/support/search.do?cmd=displayKC&externalId=7003271

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_SECTRACK

20090521 Novell GroupWise Web Access Multiple XSS

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.