Web application vulnerabilities in Horde Kronolith H4 by Horde
CVE-2012-6620

Currently unrated

Key Information:

Vendor: Horde
Status: Kronolith H4
Vendor: CVE Published:; 16 January 2014

What is CVE-2012-6620?

Certain versions of Horde Kronolith H4, specifically before 3.0.17, are susceptible to multiple cross-site scripting (XSS) vulnerabilities. These flaws exist within the tasks and search views, enabling remote attackers to inject arbitrary web scripts or HTML through unspecified vectors. Successful exploitation of these vulnerabilities could lead to unauthorized access and compromise of user data.

References

http://secunia.com/advisories/49147

third-party-advisoryx_refsource_SECUNIA

http://bugs.horde.org/ticket/11189

x_refsource_MISC

http://www.securityfocus.com/bid/53731

vdb-entryx_refsource_BID

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 16, 2014
Vulnerability Reserved
Jan 16, 2014

CVE-2012-6620 Data

JSON