CVE-2007-0110

CVE-2007-0110 describes a cross-site scripting (XSS) vulnerability in Novell Access Manager Identity Server (nidp/idff/sso) prior to version 3.0.0-1013. The issue arises because the IssueInstant parameter is not properly sanitized in the resulting error message, allowing remote attackers to injec...

CVE-2007-0110

Cross-site scripting XSS vulnerability in nidp/idff/sso in Novell Access Manager Identity Server before 3.0.0-1013 allows remote attackers to inject arbitrary web script or HTML via the IssueInstant parameter, which is not properly handled in the resulting error message...

Novell Access Manager 3 Identity Server - 'IssueInstant' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21921/info Access Manager Identity Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of ...