CVE-2010-3077

Cross-site scripting XSS vulnerability in util/iconbrowser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML via the subdir parameter...

CVE-2010-3077

The CVE-2010-3077 issue is a cross-site scripting (XSS) vulnerability in Horde Application Framework (util/icon_browser.php) before version 3.3.9 that allows remote attackers to inject arbitrary web script or HTML via the subdir parameter. Affected product: Horde/Horde3 web framework (before 3.3....

CVE-2010-3694

CVE-2010-3694 is a CSRF vulnerability in the Horde Application Framework prior to 3.3.9 that can hijack a victim’s authentication for requests to a preference form. Affected product: Horde/ Horde3 (before 3.3.9); root cause: CSRF on the preference form. Impact per CVSS2: partial confidentiality, ...

CVE-2010-3077

Cross-site scripting XSS vulnerability in util/iconbrowser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML via the subdir parameter...

CVE-2010-3694

Cross-site request forgery CSRF vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form...

Fedora 14 : horde-3.3.9-1.fc14 (2010-16525)

Fix 2 security bugs by upgrading to 3.3.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

Fedora 13 : horde-3.3.9-1.fc13 (2010-16555)

Fix 2 security bugs by upgrading to 3.3.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

[SECURITY] Fedora 14 Update: horde-3.3.9-1.fc14

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

[SECURITY] Fedora 13 Update: horde-3.3.9-1.fc13

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

[SECURITY] Fedora 12 Update: horde-3.3.9-1.fc12

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

horde-base -- XSS: VCARD attachments vulnerability

The Horde team reports: The major changes compared to Horde version 3.3.10 are: Fixed XSS vulnerability when viewing details of a vCard...

FreeBSD Ports: horde-base

The remote host is missing an update to the system as announced in the referenced advisory. VID 8fc55043-cb1e-11df-9c1b-0011098ad87f OpenVAS Vulnerability Test $ Description: Auto generated from VID 8fc55043-cb1e-11df-9c1b-0011098ad87f Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: horde-imp

The remote host is missing an update to the system as announced in the referenced advisory. VID 6c4db192-cb23-11df-9c1b-0011098ad87f OpenVAS Vulnerability Test $ Description: Auto generated from VID 6c4db192-cb23-11df-9c1b-0011098ad87f Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: horde-gollem

The remote host is missing an update to the system as announced in the referenced advisory. VID e08c596e-cb28-11df-9c1b-0011098ad87f OpenVAS Vulnerability Test $ Description: Auto generated from VID e08c596e-cb28-11df-9c1b-0011098ad87f Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: horde-gollem

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: horde-base

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: horde-imp

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

IMP Webmail stored cross-site scripting vulnerability and fixes-vulnerability warning-the black bar safety net

Affected version: Horde IMP 4.3.7 vulnerability description: BUGTRAQ ID: 4 3 5 1 5 IMP is a Web-based powerful e-mail program, by the Horde project group developed, can be used in Linux/Unix or Windows operating system. IMP Webmail is not correctly filtered submitted to the fetchmailprefs. php...

FreeBSD : horde-base -- XSS and CSRF vulnerabilities (8fc55043-cb1e-11df-9c1b-0011098ad87f)

The Horde team reports : Thanks to Naumann IT Security Consulting for reporting the XSS vulnerability. Thanks to Secunia for releasing an advisory for the new CSRF protection in the preference interface The major changes compared to Horde version 3.3.8 are : Fixed XSS vulnerability in...

FreeBSD : horde-gollem -- XSS vulnerability (e08c596e-cb28-11df-9c1b-0011098ad87f)

The Horde team reports : The major changes compared to Gollem version H3 1.1.1 are : Fixed an XSS vulnerability in the file viewer. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyrigh...