Multiple Cross-Site Scripting Vulnerabilities in Horde Kronolith by Horde Group
CVE-2005-4189

Currently unrated

Key Information:

Vendor: Horde
Status: Kronolith H3
Vendor: CVE Published:; 13 December 2005

What is CVE-2005-4189?

Horde Kronolith H3 versions prior to 2.0.6 are susceptible to multiple cross-site scripting (XSS) vulnerabilities that allow remote authenticated users to inject malicious web scripts or HTML into various input fields, including calendar names, event titles during deletions, category and location searches, and attendee email address fields when editing event details. This exploitation could lead to unauthorized actions or data exposure, highlighting the need for users to update to the latest version for enhanced security.

References

http://secunia.com/advisories/18827

third-party-advisoryx_refsource_SECUNIA

http://www.osvdb.org/21609

vdb-entryx_refsource_OSVDB

http://archives.neohapsis.com/archives/fulldisclosure/200...

mailing-listx_refsource_FULLDISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 13, 2005
Vulnerability Reserved
Dec 13, 2005

CVE-2005-4189 Data

JSON