Cross-Site Scripting Vulnerability in Horde by Horde Project
CVE-2005-0961

Currently unrated

Key Information:

Vendor

Horde

Status
Application Framework
Vendor
CVE Published:
2 May 2005

What is CVE-2005-0961?

A cross-site scripting vulnerability exists in Horde version 3.0.4 prior to 3.0.4-RC2, enabling remote attackers to execute arbitrary web scripts or HTML by manipulating the parent frame title. This allows for potential data theft, session hijacking, or defacement of content viewed by users.

References

http://lists.horde.org/archives/announce/2005/000176.html
x_refsource_CONFIRM
http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515...
x_refsource_CONFIRM
http://www.novell.com/linux/security/advisories/2005_16_s...
vendor-advisoryx_refsource_SUSE

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.