Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2006-4255

Disclosure Date: August 21, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors related to folder names, as injected into the vfolder_label form field in the IMP search screen.
0
0
Attacker Value
Unknown

CVE-2006-1260

Disclosure Date: March 19, 2006 (last updated February 22, 2025)
Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check.
0
0
Attacker Value
Unknown

CVE-2005-3759

Disclosure Date: November 22, 2005 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in Horde before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) gzip/tar and (2) css MIME viewers, which do not filter or escape dangerous HTML when extracting and displaying attachments.
0
0
Attacker Value
Unknown

CVE-2005-3570

Disclosure Date: November 16, 2005 (last updated February 22, 2025)
Unspecified cross-site scripting (XSS) vulnerability in Horde before 2.2.9 allows remote attackers to inject arbitrary web script or HTML via "not properly escaped error messages".
0
0