EUVD-2008-5074

Malware in sbrugna...

CVE-2008-5095

Cross-site scripting XSS vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioning Module 3.6.0 and 3.6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-5095

CVE-2008-5095 is an XSS vulnerability affecting Novell products: Novell User Application (versions 3.0.1, 3.5.0, 3.5.1) and Identity Manager Roles Based Provisioning Module (3.6.0, 3.6.1). The available documents state that remote attackers can inject arbitrary web script or HTML via unknown vect...

CVE-2008-5095

Cross-site scripting XSS vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioning Module 3.6.0 and 3.6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-5095: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioning Module 3.6.0 and 3.6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Novell IDM跨站脚本和HTML注入漏洞

BUGTRAQ ID: 30952 CNCAN ID：CNCAN-2008090305 Novell IDM是一款身份管理解决方案。 Novell IDM不正确处理用户提交的输入，远程攻击者可以利用漏洞使恶意脚本代码在目标用户浏览器上执行，导致敏感信息泄漏。 受影响的Novell User Application版本如下： 3.0.1 3.5.0 3.5.1 受影响的Novell Identity Manager Roles Based Provisioning模块版本如下： 3.6.0 3.6.1 Novell User Application 3.5.1 Novell User...