Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2005-2276

4 documents4 sources
Severity
4.3MEDIUM
EPSS
2.3%
top 15.10%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Novell Groupwise Webaccess
Timeline
PublishedJul 26
Latest updateMay 1

Description

Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI (e.g. "jAvascript" in an IMG tag.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: secunia.com ↗Patch: support.novell.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-xvr7-j937-8w46: Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6↗2022-05-01
▶
CVEList
CVE-2005-2276: Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6↗2005-07-26
▶

💥Exploits & PoCs

1
Exploit-DB
Novell Groupwise 6.5 Webaccess - HTML Injection↗2005-07-15
▶