CVE-2022-41351: Improper Neutralization of Input During Web Page Generation

In Zimbra Collaboration Suite ZCS 8.8.15, at the URL /h/calendar, one can trigger XSS by adding JavaScript code to the view parameter and changing the value of the uncheck parameter to a string instead of default value of 10...

PT-2022-25823

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite version 8.8.15 Description The issue allows an attacker to trigger XSS by adding JavaScript code to the view parameter and changing the value of the uncheck parameter to a string at the URL "/h/calendar"...

PT-2012-3136

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite ZCS versions 6.x through 6.0.14 Zimbra Collaboration Suite ZCS versions 7.x through 7.1.2 Description A cross-site scripting XSS issue exists in the Zimbra Web Client, specifically in the zimbra/h/calendar component...

CVE-2012-1213: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite ZCS 6.x before 6.0.15 and 7.x before 7.1.3 allows remote attackers to inject arbitrary web script or HTML via the view parameter...