CVE-2006-3818

Cross-site scripting (XSS) vulnerability in the login page in Novell GroupWise WebAccess 6.5 before 20060721 and WebAccess 7 before 20060727 allows remote attackers to inject arbitrary web script or HTML via the GWAP.version parameter.

• http://secunia.com/advisories/21411Third Party Advisory
• http://securitytracker.com/id?1016648Third Party Advisory, VDB Entry
• http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974176.htmVendor Advisory
• http://www.securityfocus.com/bid/19297Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/3098Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28210Third Party Advisory, VDB Entry
• https://secure-support.novell.com/KanisaPlatform/Publishing/228/3574517_f.SAL_Public.htmlPermissions Required, Vendor Advisory
• http://secunia.com/advisories/21411Third Party Advisory
• http://securitytracker.com/id?1016648Third Party Advisory, VDB Entry
• http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974176.htmVendor Advisory
• http://www.securityfocus.com/bid/19297Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/3098Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28210Third Party Advisory, VDB Entry
• https://secure-support.novell.com/KanisaPlatform/Publishing/228/3574517_f.SAL_Public.htmlPermissions Required, Vendor Advisory

Published

Aug 11, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3812Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, …
• CVE-2006-3813A regression error in the Perl package for Red Hat Enterpris…
• CVE-2006-3814Buffer overflow in the Loader_XM::load_instrument_internal f…
• CVE-2006-3815heartbeat.c in heartbeat before 2.0.6 sets insecure permissi…
• CVE-2006-3816Krusader 1.50-beta1 up to 1.70.0 stores passwords for remote…
• CVE-2006-3817Cross-site scripting (XSS) vulnerability in Novell GroupWise…
• CVE-2006-3819Eval injection vulnerability in the configure script in TWik…
• CVE-2006-3820Cross-site scripting (XSS) vulnerability in loudblog/index.p…
• CVE-2006-3821Multiple cross-site scripting (XSS) vulnerabilities in ATuto…
• CVE-2006-3822SQL injection vulnerability in index.php in GeodesicSolution…
• CVE-2006-3823SQL injection vulnerability in index.php in GeodesicSolution…
• CVE-2006-3824systeminfo.c for Sun Solaris allows local users to read kern…