Cross-site Scripting Vulnerability in Horde IMP and Horde Groupware Webmail Edition
CVE-2010-3695

Currently unrated

Key Information:

Vendor

Horde

Status
Imp
Vendor
CVE Published:
31 March 2011

What is CVE-2010-3695?

An XSS vulnerability exists in fetchmailprefs.php within Horde IMP and Horde Groupware Webmail Edition. This flaw enables remote attackers to inject arbitrary web scripts or HTML through the fm_id parameter during a fetchmail_prefs_save action, impacting the security of the affected systems. Prompt updates to the latest versions can mitigate this vulnerability.

References

http://lists.horde.org/archives/announce/2010/000568.html
mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/43515
vdb-entryx_refsource_BID
http://www.debian.org/security/2011/dsa-2204
vendor-advisoryx_refsource_DEBIAN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.