Cross-Site Scripting Vulnerability in Horde-IMP by Horde
CVE-2004-1443

Currently unrated

Key Information:

Vendor: Horde
Status: Imp
Vendor: CVE Published:; 31 December 2004

What is CVE-2004-1443?

The vulnerability permits attackers to inject arbitrary web scripts or HTML into the inline MIME viewer of Horde-IMP when accessed using Internet Explorer. This occurs in versions 3.2.4 and earlier, allowing potential exploitation through malicious email messages. Attackers can leverage this flaw to execute unwanted scripts in users' browsers, which may lead to various security risks, including information theft and session hijacking.

References

http://www.securityfocus.com/bid/10845

vdb-entryx_refsource_BID

https://exchange.xforce.ibmcloud.com/vulnerabilities/16866

vdb-entryx_refsource_XF

http://secunia.com/advisories/12202/

third-party-advisoryx_refsource_SECUNIA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Feb 13, 2005
Vulnerability published
Dec 31, 2004

CVE-2004-1443 Data

JSON