CVE-2011-1335

CVE-2011-1335

EPSS 1.3%

Cross-site scripting (XSS) vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "address book and user list functions."

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://cs.cybozu.co.jp/information/20100816notice05.php http://jvndb.jvn.jp/jvndb/JVNDB-2011-000047 http://jvn.jp/en/jp/JVN55508059/index.html http://secunia.com/advisories/44992 http://secunia.com/advisories/45050 http://www.osvdb.org/73320 http://www.securityfocus.com/bid/48446