CVE-2007-0110

CVE-2007-0110 describes a cross-site scripting (XSS) vulnerability in Novell Access Manager Identity Server (nidp/idff/sso) prior to version 3.0.0-1013. The issue arises because the IssueInstant parameter is not properly sanitized in the resulting error message, allowing remote attackers to injec...