Cross-Site Scripting Vulnerability in IMP and HORDE Products
CVE-2002-0181

Currently unrated

Key Information:

Vendor: Horde
Status: Imp; Horde
Vendor: CVE Published:; 22 April 2002

What is CVE-2002-0181?

A cross-site scripting vulnerability exists in the status.php3 script used by IMP 2.2.8 and HORDE 1.2.7. This flaw allows remote attackers to inject arbitrary web scripts into the page, which can lead to cookie theft from users of the impacted versions. Delivery of such scripts is facilitated through the manipulation of script parameters, making it essential for users to secure their applications from potential exploitation.

References

http://bugs.horde.org/show_bug.cgi?id=916

x_refsource_MISC

http://marc.info/?l=bugtraq&m=101828033830744&w=2

mailing-listx_refsource_BUGTRAQ

http://www.calderasystems.com/support/security/advisories...

vendor-advisoryx_refsource_CALDERA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 22, 2002
Vulnerability Reserved
Apr 17, 2002

CVE-2002-0181 Data

JSON

Horde

What is CVE-2002-0181?

References

Timeline