Cross-Site Scripting Vulnerability in Turba Contact Manager by Horde
CVE-2008-6746

Currently unrated

Key Information:

Vendor

Horde

Status
Turba H3
Vendor
CVE Published:
23 April 2009

What is CVE-2008-6746?

A cross-site scripting (XSS) vulnerability exists in the contact display view of Turba Contact Manager H3, prior to version 2.2.1. This flaw allows remote attackers to exploit the application by injecting arbitrary web script or HTML via manipulated contact names, potentially compromising user security and privacy.

References

http://cvs.horde.org/diff.php/turba/docs/CHANGES?r1=1.181...
x_refsource_CONFIRM
http://secunia.com/advisories/30704
third-party-advisoryx_refsource_SECUNIA
http://lists.horde.org/archives/announce/2008/000414.html
mailing-listx_refsource_MLIST

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.