Cross-Site Scripting Vulnerabilities in Horde Kronolith Calendar Application
CVE-2012-5566

Currently unrated

Key Information:

Vendor

Horde

Status
Kronolith H4
Vendor
CVE Published:
5 April 2014

What is CVE-2012-5566?

The Horde Kronolith Calendar Application contains multiple vulnerabilities that enable remote attackers to inject arbitrary web scripts or HTML into the application. These vulnerabilities can be exploited through the tasks view and the search view, potentially compromising user data and security.

References

http://lists.opensuse.org/opensuse-updates/2012-12/msg000...
vendor-advisoryx_refsource_SUSE
http://bugs.horde.org/ticket/11189
x_refsource_CONFIRM
http://www.osvdb.org/82382
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.