← Database

CVE-2006-4220

MEDIUM CVSS: 4.3 Published: 2006-12-31 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in webacc in Novell GroupWise WebAccess before 7 Support Pack 3 Public Beta allow remote attackers to inject arbitrary web script or HTML via the (1) User.html, (2) Error, (3) User.Theme.index, and (4) and User.lang parameters.

Affected Platforms

Novell GroupwiseNovell Groupwise Webaccess

Weakness Type

CWE-79

References