Cross-site Scripting Vulnerability in Horde Turba Contact Manager by Horde
CVE-2008-4182
Currently unrated
Key Information:
- Vendor
Horde
- Status
- Vendor
- CVE Published:
- 23 September 2008
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2008-4182?
The Horde Turba Contact Manager has a cross-site scripting (XSS) vulnerability in the imp/test.php file, which allows remote attackers to inject arbitrary web script or HTML through the User field during an IMAP session. This can lead to the execution of malicious scripts, potentially compromising user data and system integrity.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.