2 matches found
CVE-2009-1635
CVE-2009-1635 : Novell GroupWise WebAccess (7.x pre-7.03 HP3 and 8.x pre-8.0 HP2) is affected by cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary script/HTML via (1) the login page User.lang parameter, (2) style expressions in HTML emails, or (3) vectors ...
Novell Groupwise Cross Site Scripting
Novell GroupWise Web Access Multiple XSS /============================================\ / SecureState R&D Team - leroy and sasquatch \ / Discovered: 11-24-08, 03-05-09 \ \ Vendor Notified: 01-06-09, 03-05-09 / \ Vendor Publication: 05-21-09 / ============================================/...