Cross-Site Referencing Vulnerability in Horde Application Framework
CVE-2006-4256

Currently unrated

Key Information:

Vendor: Horde
Status: Application Framework
Vendor: CVE Published:; 21 August 2006

What is CVE-2006-4256?

The Horde Application Framework prior to version 3.1.2 is susceptible to a cross-site referencing vulnerability that allows remote attackers to include external web pages via manipulated URL parameters. This flaw can be exploited to facilitate phishing attacks by luring users into unwittingly submitting sensitive information into the attacker's site disguised as a legitimate service. Unlike traditional cross-site scripting (XSS), this method does not rely on script execution within the user's browser but rather involves redirecting the victim to malicious content, making it essential for users to stay vigilant against possible exploits.

References

http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2456

x_refsource_MISC

http://lists.horde.org/archives/announce/2006/000292.html

mailing-listx_refsource_MLIST

http://secunia.com/advisories/27565

third-party-advisoryx_refsource_SECUNIA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 21, 2006
Vulnerability Reserved
Aug 21, 2006

CVE-2006-4256 Data

JSON