mirror of
https://github.com/offensive-security/exploitdb.git
synced 2026-11-10 22:11:29 -10:00
7 lines
483 B
Plaintext
Executable File
7 lines
483 B
Plaintext
Executable File
source: http://www.securityfocus.com/bid/14310/info
|
|
|
|
Novell GroupWise WebAccess is prone to an HTML injection vulnerability. This may be used to inject hostile HTML and script code into the Web mail application. When a user opens an email containing the hostile code, it may be rendered in their browser.
|
|
|
|
Successful exploitation could potentially allow theft of cookie-based authentication. Other attacks are also possible.
|
|
|
|
<IMG SRC="jAvascript:alert(document.cookie)"> |