CVE:CVE-2006-6675
CNNVD:CNNVD-200612-458
Novell NetWare 6.5 Support Pack 5和6和Novell Apache on NetWare 2.0.48存在跨站脚本攻击(XSS)漏洞，远程攻击者可以通过在Welcome web-app中的未明参数来注入任意Web脚本或HTML。
solution:Upgrade novell apache_http_server to a higher version than 2.0.48,and avoid the version 2.0.48; Upgrade novell netware to a higher version than 6.5:sp5,6.5:sp6,and avoid the version 6.5:sp5,6.5:sp6