Cross-Site Scripting Vulnerability in Horde IMP Email Client
CVE-2006-4255

Currently unrated

Key Information:

Vendor: Horde
Status: Imp; Horde
Vendor: CVE Published:; 21 August 2006

What is CVE-2006-4255?

The vulnerability in the Horde IMP email client allows remote attackers to exploit Cross-Site Scripting (XSS) by injecting arbitrary web scripts or HTML into the vfolder_label form field within the search interface. This can be done through various unspecified vectors related to folder names, posing a significant security risk to users and systems relying on this application. Users of Horde IMP versions prior to 4.1.3 are particularly susceptible and should take immediate measures to upgrade to mitigate this risk.

References

http://www.securityfocus.com/bid/19544

vdb-entryx_refsource_BID

http://lists.horde.org/archives/announce/2006/000294.html

mailing-listx_refsource_MLIST

http://www.vupen.com/english/advisories/2006/3316

vdb-entryx_refsource_VUPEN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 21, 2006
Vulnerability Reserved
Aug 21, 2006

CVE-2006-4255 Data

JSON