Novell QuickFinder Server Multiple Cross Site Scripting (CVE-2009-0611)

QuickFinder is a site-specific search engine that allows users to search the public and private sites, partners' sites and any number of additional Web sites across the Internet, all from a single search interface on one Web site. A cross-site scripting vulnerability exists in Novell QuickFinder...

CVE-2009-0611

CVE-2009-0611 affects Novell Open Enterprise Server 1.x via QuickFinder Server’s qfsearch/AdminServlet. The vulnerability is multiple cross-site scripting (XSS) in which attackers can inject arbitrary script/HTML through parameters: siteloc (displayaddsite), site (generalproperties or clusterserv...