Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-5917
HistoryJan 21, 2009 - 2:30 a.m.

CVE-2008-5917

2009-01-2102:30:00
CWE-79
[email protected]
web.nvd.nist.gov
63
cve-2008-5917
xss
web security
remote code injection
horde application framework
internet explorer

6.2 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.0%

JSON

Cross-site scripting (XSS) vulnerability in the XSS filter (framework/Text_Filter/Filter/xss.php) in Horde Application Framework 3.2.2 and 3.3, when Internet Explorer is being used, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to style attributes.

Affected configurations

NVD
Node
hordeapplication_frameworkMatch3.2.2
OR
hordeapplication_frameworkMatch3.3
AND
microsoftinternet_explorer

Related

prion 1
openvas 12
ubuntucve 1
cvelist 1
redhatcve 1
nvd 1
nessus 7
debian 2
securityvulns 1
osv 1
gentoo 1
fedora 3
prion
prion
Cross site scripting
2009-01-21 02:30:00
openvas
openvas
Horde XSS Filter Cross Site Scripting Vulnerability
2009-04-10 00:00:00
Horde XSS Filter XSS Vulnerability
2009-04-10 00:00:00
Debian Security Advisory DSA 1765-1 (horde3)
2009-04-15 00:00:00
ubuntucve
ubuntucve
CVE-2008-5917
2009-01-21 00:00:00
cvelist
cvelist
CVE-2008-5917
2009-01-21 02:00:00
redhatcve
redhatcve
CVE-2008-5917
2019-10-04 20:57:41
nvd
nvd
CVE-2008-5917
2009-01-21 02:30:00
nessus
nessus
openSUSE Security Update : horde (horde-657)
2009-07-21 00:00:00
openSUSE 10 Security Update : horde (horde-6099)
2009-03-24 00:00:00
Debian DSA-1765-1 : horde3 - Multiple vulnerabilities
2009-04-09 00:00:00
debian
debian
[SECURITY] [DSA 1765-1] New horde3 packages fix several vulnerabilities
2009-04-08 13:22:34
[SECURITY] [DSA 1765-1] New horde3 packages fix several vulnerabilities
2009-04-08 13:22:34
securityvulns
securityvulns
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2009-04-10 00:00:00
osv
osv
horde3 - several vulnerabilities
2009-04-08 00:00:00
gentoo
gentoo
Horde: Multiple vulnerabilities
2009-09-12 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: horde-3.3.6-1.fc11
2010-04-01 01:40:32
[SECURITY] Fedora 12 Update: horde-3.3.6-1.fc12
2010-04-01 01:51:02
[SECURITY] Fedora 13 Update: horde-3.3.6-1.fc13
2010-04-01 17:20:56

6.2 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.0%

JSON
Related for CVE-2008-5917
prion1openvas12ubuntucve1cvelist1redhatcve1nvd1nessus7debian2securityvulns1osv1gentoo1fedora3