Horde Turba Detection

The remote host is running Turba, a PHP-based addressbook / contact management utility from the Horde Project. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18137; scriptversion"1.24"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...

Horde Turba Contact Manager common-footer.inc Parent Frame Page Title XSS

According to its version, the remote installation of Horde fails to fully sanitize user-supplied input when setting the parent frame's page title by JavaScript in 'templates/common-footer.inc'. By leveraging this flaw, an attacker may be able to inject arbitrary HTML and script code into a user's...

Horde Nag Detection

The remote host is running Nag, an open source PHP-based multi-user task list manager from the Horde Project. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18135; scriptversion"1.23"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...

CVE-2005-1317

Cross-site scripting XSS vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

Horde Chora < 1.2.3 Parent Frame Page Title XSS

Binary data 2853.prm...

Horde Nag < 1.1.3 Parent Frame Page Title XSS

Binary data 2852.prm...

Horde Vacation < 2.2.2 Parent Frame Page Title XSS

Binary data 2850.prm...

Horde MNemo < 1.1.4 Parent Frame Page Title XSS

Binary data 2851.prm...

Horde Forwards < 2.2.2 Parent Frame Page Title XSS

Binary data 2855.prm...

Horde Accounts < 2.1.2 Parent Frame Page Title XSS

Binary data 2854.prm...

CVE-2005-0961

Horde 3.0.4 is vulnerable to an XSS in the page title due to insufficient sanitization of the parent frame title, affecting versions before 3.0.4-RC2. The vulnerability allows remote attackers to inject arbitrary script/HTML. Remediation: upgrade to Horde 3.0.4-RC2 or later.

[SA14730] Horde Page Title Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Horde Page Title Cross-Site Scripting Vulnerability...

Horde < 3.0.4 Parent Page Title XSS

Binary data 2779.prm...

horde -- Horde Page Title Cross-Site Scripting Vulnerability

Secunia Advisory: SA14730 A vulnerability has been reported in Horde, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed when setting the parent frame's page title via JavaScript is not properly sanitised before being returned to the user. This can be...

CVE-2004-1443

Cross-site scripting XSS vulnerability in the inline MIME viewer in Horde-IMP Internet Messaging Program 3.2.4 and earlier, when used with Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via an e-mail message...

CVE-2005-0378

Multiple cross-site scripting XSS vulnerabilities in Horde 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 group parameter to prefs.php or 2 url parameter to index.php...

CVE-2005-0378

CVE-2005-0378 affects Horde 3.0 (webmail/groupware) with two cross-site scripting vulnerabilities. The flaws allow remote attackers to inject arbitrary scripts via (1) the group parameter to prefs.php and (2) the url parameter to index.php, potentially executing in a user’s browser. The OpenVAS/N...

CVE-2004-1443

CVE-2004-1443 is a documented XSS vulnerability in the Horde-IMP inline MIME viewer affecting Horde-IMP versions 3.2.4 and earlier when accessed with Internet Explorer. The vulnerability allows an attacker to inject arbitrary script/HTML via a crafted e‑mail message. Public assessment sources con...

H2005-01.txt

Hyperdose Security Advisory Name: Cross Site Scripting holes found in Horde 3.0 Systems Affected: Horde 3.0 installations Severity: Moderate Author: Robert Fly - [email protected] Advisory URL: http://www.hyperdose.com/advisories/H2005-01.txt --Horde Description-- The Horde Application Framewo...

Cross Site Scripting holes found in Horde 3.0

Hyperdose Security Advisory Name: Cross Site Scripting holes found in Horde 3.0 Systems Affected: Horde 3.0 installations Severity: Moderate Author: Robert Fly - [email protected] Advisory URL: http://www.hyperdose.com/advisories/H2005-01.txt --Horde Description-- The Horde Application Framewo...