Multiple Cross-Site Scripting Vulnerabilities in Horde Application Framework and Groupware Products
CVE-2009-3237

Currently unrated

Key Information:

Vendor: Horde
Status: Horde Groupware; Horde Application Framework
Vendor: CVE Published:; 17 September 2009

What is CVE-2009-3237?

The Horde Application Framework and various Groupware products are susceptible to multiple cross-site scripting vulnerabilities. These issues arise from improper handling of user inputs, such as crafted number preferences and unknown MIME 'text parts'. Attackers can exploit these vulnerabilities to inject arbitrary web scripts or HTML, potentially leading to unauthorized actions on behalf of users. Updating to the latest versions of the affected products mitigates these risks.

References

http://marc.info/?l=horde-announce&m=125294558611682&w=2

mailing-listx_refsource_MLIST

http://secunia.com/advisories/36665

third-party-advisoryx_refsource_SECUNIA

http://bugs.horde.org/ticket/?id=8311

x_refsource_CONFIRM

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 17, 2009
Vulnerability Reserved
Sep 16, 2009

CVE-2009-3237 Data

JSON