CVE-2006-4255

🗓️ 21 Aug 2006 20:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 48 Views🌐 WEB

CVE-2006-4255 Cross-site scripting vulnerability in Horde IMP H3 before 4.1.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2006-4255	17 Jan 202514:56	–	circl
Cvelist	CVE-2006-4255	21 Aug 200620:00	–	cvelist
EUVD	EUVD-2006-4243	7 Oct 202500:30	–	euvd
Tenable Nessus	FreeBSD : horde -- Phishing and XSS Vulnerabilities (e2e8d374-2e40-11db-b683-0008743bf21a)	21 Aug 200600:00	–	nessus
NVD	CVE-2006-4255	21 Aug 200620:04	–	nvd
Prion	Cross site scripting	26 Mar 200723:19	–	prion
Positive Technologies	PT-2006-5066 · Horde · Horde Imp H3	21 Aug 200600:00	–	ptsecurity
UbuntuCve	CVE-2006-4255	21 Aug 200620:04	–	ubuntucve

NVD

Node

horde hordeMatch3.0

OR

horde hordeMatch3.0.1

OR

horde hordeMatch3.0.2

OR

horde hordeMatch3.0.3

OR

horde hordeMatch3.0.4

OR

horde hordeMatch3.0.4_rc1

OR

horde hordeMatch3.0.4_rc2

OR

horde hordeMatch3.0.6

OR

horde hordeMatch3.0.7

OR

horde hordeMatch3.0.8

OR

horde hordeMatch3.0.9

OR

horde hordeMatch3.1

OR

horde hordeMatch3.1.1

OR

horde impMatch2.0

OR

horde impMatch2.2

OR

horde impMatch2.2.1

OR

horde impMatch2.2.2

OR

horde impMatch2.2.3

OR

horde impMatch2.2.4

OR

horde impMatch2.2.5

OR

horde impMatch2.2.6

OR

horde impMatch2.2.7

OR

horde impMatch2.2.8

OR

horde impMatch2.3

OR

horde impMatch3.0

OR

horde impMatch3.1

OR

horde impMatch3.1.2

OR

horde impMatch3.2

OR

horde impMatch3.2.1

OR

horde impMatch3.2.2

OR

horde impMatch3.2.3

OR

horde impMatch3.2.4

OR

horde impMatch3.2.5

OR

horde impMatch4.0

OR

horde impMatch4.0.1

OR

horde impMatch4.0.2

OR

horde impMatch4.0.3

OR

horde impMatch4.0.4

Source	Link
vupen	www.vupen.com/english/advisories/2006/3316
secunia	www.secunia.com/advisories/21533
securityfocus	www.securityfocus.com/bid/19544
securityfocus	www.securityfocus.com/archive/1/443361/100/0/threaded
securitytracker	www.securitytracker.com/id
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/28409
lists	www.lists.horde.org/archives/announce/2006/000294.html
scip	www.scip.ch/cgi-bin/smss/showadvf.pl
securityreason	www.securityreason.com/securityalert/1423

Parameter	Position	Path	Description	CWE
vfolder_label	request body	horde/imp/search.php	XSS via vfolder_label in IMP search screen allowing injection of arbitrary script/HTML	CWE-79

16 Apr 2026 00:27Current

5.6Medium risk

Vulners AI Score5.6

CVSS 24.3

EPSS0.00877

cve 2006 4255 cross-site scripting xss vulnerability horde imp h3 remote attackers web script html folder names vfolder_label form field nvd