Cross-Site Scripting Vulnerabilities in Horde Internet Mail Program
CVE-2014-4946

Currently unrated

Key Information:

Vendor: Horde
Status: Internet Mail Program; Groupware
Vendor: CVE Published:; 14 July 2014

What is CVE-2014-4946?

Multiple cross-site scripting (XSS) vulnerabilities exist in the Horde Internet Mail Program (IMP) prior to version 6.1.8 and in Horde Groupware Webmail Edition prior to version 5.1.5. These vulnerabilities enable remote attackers to inject arbitrary web scripts or HTML by manipulating certain flags or mailbox names within the dynamic mailbox view. Such vulnerabilities can lead to unauthorized actions on behalf of users and compromise the integrity of web-based communication.

References

http://secunia.com/advisories/59772

third-party-advisoryx_refsource_SECUNIA

http://lists.horde.org/archives/announce/2014/001025.html

mailing-listx_refsource_MLIST

http://secunia.com/advisories/59770

third-party-advisoryx_refsource_SECUNIA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Oct 3, 2022
Vulnerability published
Jul 14, 2014

CVE-2014-4946 Data

JSON