CVE-2006-4220

Multiple cross-site scripting (XSS) vulnerabilities in webacc in Novell GroupWise WebAccess before 7 Support Pack 3 Public Beta allow remote attackers to inject arbitrary web script or HTML via the (1) User.html, (2) Error, (3) User.Theme.index, and (4) and User.lang parameters.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.93% chance of exploitation in the next 30 days, 79th percentile

Published

2008-02-05

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/31095

References

• CVE Record
• NVD entry

Related

• CVE-2006-4219
• CVE-2006-4221
• CVE-2006-4217
• CVE-2006-4227
• CVE-2006-4215
• CVE-2006-4230