[SA19483] Groupmax World Wide Web Cross-Site Scripting Vulnerability

TITLE: Groupmax World Wide Web Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA19483 VERIFY ADVISORY: http://secunia.com/advisories/19483/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Groupmax World Wide Web for Scheduler 3.x...

CVE-2004-2493

The CVE-2004-2493 entry describes a directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichitai. A remote authenticated attacker can read arbitrary .html files through the template name parameter. Affected software components are the ...