Horde : Security Vulnerabilities, CVEs, Published In 2006 (XSS) CVSS score >= 4
index.php in Horde Application Framework before 3.1.2 allows remote attackers to include web pages from other sites, which could be useful for phishing attacks, via a URL in the url parameter, aka "cross-site referencing." NOTE: some sources have referred to this issue as XSS, but it is different than classic XSS.
Max CVSS
4.3
EPSS Score
1.88%
Published
2006-08-21
Updated
2018-10-17
Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors related to folder names, as injected into the vfolder_label form field in the IMP search screen.
Max CVSS
4.3
EPSS Score
0.69%
Published
2006-08-21
Updated
2018-10-17
Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote attackers to inject arbitrary web script or HTML via a (1) javascript URI or an external (2) http, (3) https, or (4) ftp URI in the url parameter in services/go.php (aka the dereferrer), (5) a javascript URI in the module parameter in services/help (aka the help viewer), and (6) the name parameter in services/problem.php (aka the problem reporting screen).
Max CVSS
4.3
EPSS Score
1.30%
Published
2006-07-13
Updated
2018-10-18
Cross-site scripting (XSS) vulnerability in horde 3 (horde3) before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) templates/problem/problem.inc and (2) test.php.
Max CVSS
6.8
EPSS Score
3.63%
Published
2006-06-15
Updated
2017-07-20
4 vulnerabilities found