Cross-Site Scripting Vulnerability in Horde Passwd Module from Horde
CVE-2005-1313

Currently unrated

Key Information:

Vendor

Horde

Status
Passwd
Vendor
CVE Published:
2 May 2005

What is CVE-2005-1313?

The Horde Passwd module is vulnerable to cross-site scripting due to improper validation in the parent's frame page title, allowing attackers to inject arbitrary web scripts or HTML into pages viewed by unsuspecting users. This vulnerability can lead to unauthorized access, data exposure, and the potential for exploitation in vulnerable applications. Users are encouraged to update to version 2.2.2 or later to mitigate this risk.

References

http://secunia.com/advisories/15075
third-party-advisoryx_refsource_SECUNIA
http://lists.horde.org/archives/sork/Week-of-Mon-20050418...
mailing-listx_refsource_MLIST
http://cvs.horde.org/diff.php/passwd/docs/CHANGES?r1=1.1....
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.