Cross-Site Scripting Vulnerability in Horde Internet Messaging Program
CVE-2001-1257

Currently unrated

Key Information:

Vendor: Horde
Status: Imp
Vendor: CVE Published:; 21 July 2001

What is CVE-2001-1257?

A Cross-Site Scripting vulnerability exists in the Horde Internet Messaging Program (IMP) prior to versions 2.2.6 and 1.2.6, allowing remote attackers to inject and execute arbitrary JavaScript code embedded in emails. This could lead to unauthorized access to user data and manipulation of user sessions, posing significant risks to users and their sensitive information.

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio...

vendor-advisoryx_refsource_CONECTIVA

http://www.caldera.com/support/security/advisories/CSSA-2...

vendor-advisoryx_refsource_CALDERA

http://www.debian.org/security/2001/dsa-073

vendor-advisoryx_refsource_DEBIAN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
May 1, 2002
Vulnerability published
Jul 21, 2001

CVE-2001-1257 Data

JSON