CVE-2007-5176

CVE-2007-5176 describes multiple cross-site scripting (XSS) vulnerabilities in GroupLink eHelpDesk 6.2.2. An attacker can inject arbitrary script/HTML via the following parameters: (1) NA_DISPLAYNAME in helpdesk/user/rf_create.jsp, and (2) username and (3) LDAPError in index2.jsp. The NVD entry l...