Horde Multiple Product - workweek.php?Timestamp Cross-Site Scripting

Horde Multiple Product - workweek.php?Timestamp Cross-Site Scripting source: https://www.securityfocus.com/bid/29365/info Horde Kronolith is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

Horde Multiple Product - day.php?Timestamp Cross-Site Scripting

Horde Multiple Product - day.php?Timestamp Cross-Site Scripting source: https://www.securityfocus.com/bid/29365/info Horde Kronolith is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execut...

Horde Multiple Product - 'workweek.php?Timestamp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29365/info Horde Kronolith is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

Horde Multiple Product - 'week.php?Timestamp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29365/info Horde Kronolith is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

Horde Multiple Product - 'day.php?Timestamp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29365/info Horde Kronolith is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

Horde Multiple Product - week.php?Timestamp Cross-Site Scripting

Horde Multiple Product - week.php?Timestamp Cross-Site Scripting source: https://www.securityfocus.com/bid/29365/info Horde Kronolith is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execu...

hordeturba-xss.txt

+==========================================================================+ + Horde & Turba Contact Manager & XSS Vulnerabilities + +==========================================================================+ Authors: Ivan Sanchez Product: Turba Contact Manager Web: http://www.horde.org Versions...

Horde Turba 3.1.7 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/29213/info Horde Turba is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in th...

Horde Turba 3.1.7 - Multiple Cross-Site Scripting Vulnerabilities

Horde Turba 3.1.7 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29213/info Horde Turba is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

GLSA-200805-01 : Horde Application Framework: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200805-01 Horde Application Framework: Multiple vulnerabilities Multiple vulnerabilities have been reported in the Horde Application Framework: David Collins, Patrick Pelanne and the HostGator.com LLC support team discovered that...

Horde Application Framework: Multiple vulnerabilities

Background The Horde Application Framework is a general-purpose web application framework written in PHP, providing classes for handling preferences, compression, browser detection, connection tracking, MIME and more. Description Multiple vulnerabilities have been reported in the Horde Applicatio...

DSA-1560-1 kronolith2 - cross site scripting

Bulletin has no description...

[SECURITY] [DSA 1560-1] New kronolith2 packages fix cross site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1560-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 28, 2008 http://www.debian.org/security/faq -...

CVE-2008-1974

Cross-site scripting XSS vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and Groupware 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2008-1974

Cross-site scripting XSS vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and Groupware 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2008-1974

CVE-2008-1974 is an XSS vulnerability in Horde Kronolith (Kronolith 2.1.x and Groupware variants) where the url parameter in addevent.php can inject arbitrary script/HTML. The issue is reported as insufficient input sanitisation in Kronolith’s add-event flow, allowing remote attackers to execute ...

Horde Webmail XSS [Aria-Security]

Aria-Security Team Persian Security Network http://Aria-Security.com & http://Aria-Security.net ---------------------------------------------------------- Greetz: AurA, imm02tal, Mormoroth ,NULL, Kinglet http://www.horde.org/...

Horde Webmail 1.0.6 - addevent.php Cross-Site Scripting

Horde Webmail 1.0.6 - addevent.php Cross-Site Scripting source: https://www.securityfocus.com/bid/28898/info Horde Webmail is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute ...

Horde Webmail 1.0.6 - 'addevent.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28898/info Horde Webmail is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowin...

hordemail-xss.txt

Aria-Security Team Persian Security Network http://Aria-Security.com & http://Aria-Security.net ---------------------------------------------------------- Greetz: AurA, imm02tal, Mormoroth ,NULL, Kinglet http://www.horde.org/...