Input Validation Flaw in Horde IMP Email Client
CVE-2004-0584

Currently unrated

Key Information:

Vendor: Horde
Status: Imp
Vendor: CVE Published:; 6 August 2004

What is CVE-2004-0584?

An input validation flaw exists in Horde IMP versions prior to 3.2.3, allowing remote attackers to execute arbitrary scripts or HTML content in email messages. This could lead to cross-site scripting (XSS) attacks, compromising user sessions and potentially enabling further exploitation of the web application.

References

http://www.horde.org/imp/3.2/

x_refsource_MISC

http://www.securityfocus.com/bid/10501

vdb-entryx_refsource_BID

https://exchange.xforce.ibmcloud.com/vulnerabilities/16357

vdb-entryx_refsource_XF

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 6, 2004
Vulnerability Reserved
Jun 18, 2004

CVE-2004-0584 Data

JSON