CVE-2011-1333

Cross-site scripting XSS vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the bulletin board system."...

CVE-2011-1333

CVE-2011-1333 affects Cybozu Office 6 and Cybozu Garoon 2.0.0–2.1.3. It is a cross-site scripting (XSS) vulnerability exposed by an issue during downloading graphic files from the bulletin board system, allowing arbitrary script execution in a logged-in user’s browser. The remediation guidance in...