Lucene search

K

PRIOn knowledge basePRION:CVE-2009-0931

HistoryMar 17, 2009 - 9:30 p.m.

Cross site scripting

2009-03-1721:30:00

PRIOn knowledge base

www.prio-n.com

3

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.3%

Cross-site scripting (XSS) vulnerability in the tag cloud search script (horde/services/portal/cloud_search.php) in Horde before 3.2.4 and 3.3.3, and Horde Groupware before 1.1.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
hordele3.3.1
hordeeq3.2.2
hordeeq3.2.3
hordeeq3.3
hordele3.3.2
horde_groupwarele1.1.2
horde_groupwarele1.1.4
horde_groupwarele1.1.3
horde_groupwarele1.1.1

References

cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5

cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5

cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503

lists.horde.org/archives/announce/2009/000482.html

lists.horde.org/archives/announce/2009/000483.html

lists.horde.org/archives/announce/2009/000486.html

secunia.com/advisories/33695

www.securityfocus.com/bid/33491

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.3%

Related for PRION:CVE-2009-0931

ubuntucve1 cve1 cvelist1 nvd1 seebug1 gentoo1 openvas6 nessus4 fedora3