CVE Feed

    Dashboard / CVE / CVE-2009-0611

    CVE-2009-0611

    Multiple cross-site scripting (XSS) vulnerabilities in qfsearch/AdminServlet in QuickFinder Server in Novell Open Enterprise Server 1.x allow remote attackers to inject arbitrary web script or HTML via (1) the siteloc parameter in a displayaddsite action, the site parameter in a (2) generalproperties or (3) clusterserviceproperties action, (4) the adminurl parameter in a global action, or (5) the print-list parameter.

    Published:Feb 17, 2009
    Last Modified:Apr 23, 2026
    EPS:Feb 17, 2009
    EPSS Score:0.07854
    CVSS Score:4.3

    Affected Products

    Vendor
    Novell
    Product
    Open Enterprise Server

    Exploits

    http://packetstormsecurity.org/0902-exploits/nqfs-xss.txthttp://www.securityfocus.com/bid/33708http://packetstormsecurity.org/0902-exploits/nqfs-xss.txthttp://www.securityfocus.com/bid/33708https://www.exploit-db.com/exploits/32795

    Related CVEs

    CVE-2017-5182 (CVSS 7.5) — Remote Manager in Open Enterprise Server (OES) allows unauthenticated remote attackers to read any arbitrary f…
    CVE-2014-7169 (CVSS 9.8) — GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the…
    CVE-2014-6271 (CVSS 9.8) — GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variab…
    CVE-2014-0609 (CVSS 10) — Unspecified vulnerability in Novell Open Enterprise Server (OES) 11 SP1 before Scheduled Maintenance Update 94…
    CVE-2014-0599 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Mainte…
    CVE-2014-0598 (CVSS 10) — Directory traversal vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance U…
    CVE-2014-0595 (CVSS 2.6) — /opt/novell/ncl/bin/nwrights in Novell Client for Linux in Novell Open Enterprise Server (OES) 11 Linux SP2 do…
    CVE-2013-3707 (CVSS 4.3) — The HTTPSTK service in the novell-nrm package before 2.0.2-297.305.302.3 in Novell Open Enterprise Server 2 (O…
    CVE-2013-2016 (CVSS 7.8) — A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the con…
    CVE-2013-2770 (CVSS 5.8) — The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server (OE…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High