CVE-2009-0611: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in qfsearch/AdminServlet in QuickFinder Server in Novell Open Enterprise Server 1.x allow remote attackers to inject arbitrary web script or HTML via 1 the siteloc parameter in a displayaddsite action, the site parameter in a 2 generalproperties o...