Cross-Site Scripting Vulnerabilities in Horde IMP Webmail Client
CVE-2007-1515

Currently unrated

Key Information:

Vendor

Horde

Status
Imp
Vendor
CVE Published:
20 March 2007

What is CVE-2007-1515?

Horde IMP Webmail Client versions 4.1.3 and earlier are susceptible to multiple cross-site scripting vulnerabilities. Attackers can exploit these vulnerabilities to inject arbitrary web scripts or HTML into email communications through various parameters, such as the Subject header and the edit_query parameter in search.php. This exploitation could potentially allow unauthorized actions to be performed in the context of the affected user, leading to data leakage and other security concerns.

References

http://www.securitytracker.com/id?1017774
vdb-entryx_refsource_SECTRACK
http://lists.grok.org.uk/pipermail/full-disclosure/2007-M...
mailing-listx_refsource_FULLDISC
http://lists.horde.org/archives/announce/2007/000316.html
mailing-listx_refsource_MLIST

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.