Cross-Site Scripting Vulnerability in Horde Kronolith Module by Horde
CVE-2005-1314

Currently unrated

Key Information:

Vendor

Horde

Status
Kronolith
Vendor
CVE Published:
2 May 2005

What is CVE-2005-1314?

The Horde Kronolith module is affected by a cross-site scripting vulnerability that allows remote attackers to inject arbitrary web scripts or HTML through the title of a parent frame page. This security flaw, present in versions prior to 1.1.4, could potentially be exploited to redirect users to malicious sites or execute harmful scripts in the context of a user's session.

References

http://secunia.com/advisories/15080
third-party-advisoryx_refsource_SECUNIA
http://lists.horde.org/archives/kronolith/Week-of-Mon-200...
mailing-listx_refsource_MLIST
http://cvs.horde.org/diff.php/kronolith/docs/CHANGES?r1=1...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.