Cross-site Scripting Vulnerability in Horde IMP Webmail Client
CVE-2005-1319

Currently unrated

Key Information:

Vendor

Horde

Status
Imp
Vendor
CVE Published:
2 May 2005

What is CVE-2005-1319?

The vulnerability in Horde IMP Webmail client allows remote attackers to inject arbitrary scripts or HTML content into the web application. This can occur via the page title of a parent frame, significantly compromising user interaction and security. Attackers exploiting this weakness could potentially hijack user sessions, redirect users to malicious websites, or display unwanted content, emphasizing the importance of updating to versions beyond 3.2.8 for enhanced security.

References

http://secunia.com/advisories/15080
third-party-advisoryx_refsource_SECUNIA
http://lists.horde.org/archives/imp/Week-of-Mon-20050418/...
mailing-listx_refsource_MLIST
http://cvs.horde.org/diff.php/imp/docs/CHANGES?r1=1.389.2...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.