Cross-Site Scripting Vulnerabilities in Horde Turba H3 by Horde
CVE-2005-4242

Currently unrated

Key Information:

Vendor: Horde
Status: Turba H3
Vendor: CVE Published:; 14 December 2005

What is CVE-2005-4242?

Horde Turba H3 versions 2.0.4 and earlier are susceptible to multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject and execute arbitrary web scripts or HTML through user input fields in the address book and contact data. Exploitation of these vulnerabilities could compromise user data and lead to unauthorized access or manipulation of information displayed to users. Organizations using this software version should apply necessary updates as recommended to mitigate potential risks.

References

http://lists.horde.org/archives/announce/2005/000235.html

mailing-listx_refsource_MLIST

http://secunia.com/advisories/17968

third-party-advisoryx_refsource_SECUNIA

http://www.vupen.com/english/advisories/2005/2837

vdb-entryx_refsource_VUPEN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 14, 2005
Vulnerability Reserved
Dec 14, 2005

CVE-2005-4242 Data

JSON