CVE-2006-3817: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Novell GroupWise WebAccess 6.5 and 7 before 20060727 allows remote attackers to inject arbitrary web script or HTML via an encoded SCRIPT element in an e-mail message with the UTF-7 character set, as demonstrated by the "+ADw-SCRIPT+AD4-" sequence...

CVE-2006-3818: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the login page in Novell GroupWise WebAccess 6.5 before 20060721 and WebAccess 7 before 20060727 allows remote attackers to inject arbitrary web script or HTML via the GWAP.version parameter...

Novell Groupwise Webaccess crossite scripting

No description provided...

[Full-disclosure] [ISR] - Novell Groupwise Webaccess (Cross-Site Scripting)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 :: :: ISR :: Infobyte Security Research :: www.infobyte.com.ar :: 08.08.2006 :: .:: SUMMARY Novell Groupwise WebAccess Cross-Site Scripting Version: Novell GroupWise WebAccess 7, 6.5 It is suspected that all previous versions of Groupwise WebAccess ar...

CVE-2004-2336

Technical details (affected product/version, root cause, impact, fixes) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2004-2336

Unknown vulnerability in Novell GroupWise and GroupWise WebAccess 6.0 through 6.5, when running with Apache Web Server 1.3 for NetWare where Apache is loaded using GWAPACHE.CONF, allows remote attackers to read directories and files on the server...

CVE-2004-2336: Undefined Security Weakness

Unknown vulnerability in Novell GroupWise and GroupWise WebAccess 6.0 through 6.5, when running with Apache Web Server 1.3 for NetWare where Apache is loaded using GWAPACHE.CONF, allows remote attackers to read directories and files on the server...

CVE-2005-2276

The embedded sources confirm CVE-2005-2276 affects Novell GroupWise WebAccess 6.5 (pre‑July 11, 2005). The vulnerability is a cross‑site scripting (XSS) flaw where an attacker can inject arbitrary script/HTML by sending an email containing an encoded javascript URI, e.g. j&#X41vascript in an IMG ...

CVE-2005-2276

Cross-site scripting XSS vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI e.g. "j&X41vascript" in an IMG tag...

CVE-2005-2276

Cross-site scripting XSS vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI e.g. "j&X41vascript" in an IMG tag...

CVE-2005-2276: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI e.g. "jAvascript" in an IMG tag...

GroupWise WebAccess < 6.5 SP5 EMail IMG SRC XSS

Binary data 3087.prm...

Novell GroupWise WebAccess Email IMG SRC XSS

The remote host is running a version of GroupWise WebAccess from Novell that fails to sanitize email messages of HTML and script code embedded in IMG tags. An attacker can exploit this flaw to launch cross-site scripting attacks against users of WebAccess by sending them specially crafted email...

Novell GroupWise WebAccess multiple bugs

Crossite scripting, unauthorized access...

Novell Groupwise 6.5 Webaccess - HTML Injection

source: https://www.securityfocus.com/bid/14310/info Novell GroupWise WebAccess is prone to an HTML injection vulnerability. This may be used to inject hostile HTML and script code into the Web mail application. When a user opens an email containing the hostile code, it may be rendered in their...

Novell Groupwise 6.5 Webaccess - HTML Injection

Novell Groupwise 6.5 Webaccess - HTML Injection source: https://www.securityfocus.com/bid/14310/info Novell GroupWise WebAccess is prone to an HTML injection vulnerability. This may be used to inject hostile HTML and script code into the Web mail application. When a user opens an email containing...

Novell GroupWise WebAccess Detection

Binary data 2731.prm...

CVE-2005-0296

CVE-2005-0296 affects Novell GroupWise WebAccess. The error handler allows unauthenticated remote reading of sensitive info (e.g., product version) via manipulated error or modify parameters that return template files or the about page. Vendor has disputed the issue. Connected sources provide no ...

CVE-2005-0296: Undefined Security Weakness

NOTE: this issue has been disputed by the vendor. The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an incorrect login and a modified 1 error or 2 modify parameter that returns...

[Full-Disclosure] NOVL-2005-10096251 GroupWise WebAccess error handling modules &#40;report&#41;

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2005-10096251 Title: GroupWise WebAccess Error modules loading report Date: 21-January-2005 Revision: Original Product Name: GroupWise...