2966 matches found
CVE-2012-0272
Cross-site scripting XSS vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to inject arbitrary web script or HTML via the merge parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to inject arbitrary web script or HTML via the merge parameter...
CVE-2012-0272
CVE-2012-0272 concerns an XSS vulnerability in the WebAccess component of Novell GroupWise 8.0 prior to Support Pack 3, where an attacker can inject arbitrary script or HTML via the merge parameter. Multiple connected sources (SUSE SUSE CVE page, NVD/NVD entries, Nessus plugin) corroborate the af...
CVE-2012-0272
Cross-site scripting XSS vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to inject arbitrary web script or HTML via the merge parameter...
CVE-2012-0272: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to inject arbitrary web script or HTML via the merge parameter...
Novell GroupWise WebAccess User.interface XSS
The version of Novell GroupWise WebAccess hosted on the remote web server has a cross-site scripting vulnerability. This vulnerability is present when files are retrieved by passing a directory traversal string to the User.interface parameter. An attacker could exploit this by tricking a user int...
Novell GroupWise WebAccess User.interface Directory Traversal
The version of Novell GroupWise WebAccess hosted on the remote web server has a directory traversal vulnerability. Input to the User.interface parameter is not properly sanitized. An attacker could exploit this to download files under the WebAccess directory structure. %NASLMINLEVEL 70300 C Tenab...
CVE-2012-0410
Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the User.interface parameter...
Directory traversal
Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the User.interface parameter...
CVE-2012-0410
CVE-2012-0410 affects Novell GroupWise WebAccess; it is a directory traversal vulnerability in the User.interface parameter that could allow remote attackers to read arbitrary files. Affected software is GroupWise WebAccess prior to version 8.03 (8.03 fixed). The CVSSv2 base score is 5.0 (MEDIUM)...
CVE-2012-0410
Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the User.interface parameter...
CVE-2012-0410: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the User.interface parameter...
Novell GroupWise 8 WebAccess File Disclosure
File disclosure vulnerability in Novell GroupWise WebAccess Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
CVE-2012-0235
Cross-site request forgery CSRF vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2012-1235
Cross-site request forgery CSRF vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0235...
CVE-2012-0239
uaddUpAdmin.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remote attackers to modify an administrative password via a password-change request...
CVE-2012-0244
Multiple SQL injection vulnerabilities in Advantech/BroadWin WebAccess before 7.0 allow remote attackers to execute arbitrary SQL commands via crafted string input...
CVE-2012-0236
Advantech/BroadWin WebAccess 7.0 and earlier allows remote attackers to obtain sensitive information via a direct request to a URL. NOTE: the vendor reportedly "does not consider it to be a security risk."...