2031 matches found
[SA15075] Passwd Parent Frame Page Title Cross-Site Scripting Vulnerability
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Passwd Parent Frame Page Title Cross-Site Scripting...
[SA15081] Accounts Parent Frame Page Title Cross-Site Scripting Vulnerability
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Accounts Parent Frame Page Title Cross-Site Scripting...
CVE-2005-1314
The vulnerability CVE-2005-1314 affects the Horde Kronolith module prior to version 1.1.4. It is an XSS in the web UI that allows a remote attacker to inject arbitrary script or HTML via the parent frame page title. Impact is cross-site scripting; the document does not provide exploitation detail...
CVE-2005-1316
The CVE-2005-1316 entry documents a cross-site scripting (XSS) vulnerability in the Horde Accounts module for Horde, present before version 2.1.2. The issue allows remote attackers to inject arbitrary script or HTML via the parent’s frame page title. Affected software: Horde Accounts module prior...
CVE-2005-1318
The CVE-2005-1318 entry concerns Horde Forwards E-Mail Forwarding Manager prior to 2.2.2, which is vulnerable to cross-site scripting (XSS) via the parent frame page title. The affected component is the Forwarding Manager’s web interface; the root cause is improper handling of the frame title lea...
CVE-2005-1320
CVE-2005-1320 affects Horde Mnemo Note Manager prior to 1.1.4. It is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the parent frame page title. Exploitation details are limited to this vector in the provided documents; there is ...
CVE-2005-1322
CVE-2005-1322 affects the Horde Nag Task List Manager prior to 1.1.3, where a cross-site scripting (XSS) flaw allows remote attackers to inject arbitrary script or HTML via the parent frame page title. The vulnerability arises in the Nag web interface’s handling of the parent frame title, enablin...
CVE-2005-1319
CVE-2005-1319 describes a cross-site scripting (XSS) vulnerability in the Horde IMP Webmail client, affecting versions prior to 3.2.8. The root cause is unsanitized input used to set the parent frame page title, allowing remote attackers to inject arbitrary script/HTML. Public references (NVD, SU...
CVE-2005-1313
Cross-site scripting XSS vulnerability in Horde Passwd module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1314
Cross-site scripting XSS vulnerability in Horde Kronolith module before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1315
Cross-site scripting XSS vulnerability in Horde Turba module before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1316
Cross-site scripting XSS vulnerability in Horde Accounts module before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1317
Cross-site scripting XSS vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1318
Cross-site scripting XSS vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1319
Cross-site scripting XSS vulnerability in Horde IMP Webmail client before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1322
Cross-site scripting XSS vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1321
The CVE-2005-1321 entry concerns the Horde Vacation module. Affected software: Horde Vacation prior to version 2.2.2. Vulnerability: Cross-site scripting (XSS) via the parent’s frame page title in the Vacation module. Impact: enables remote attackers to inject arbitrary web script or HTML. Root c...
CVE-2005-1320
Cross-site scripting XSS vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1313
CVE-2005-1313 describes a cross-site scripting (XSS) vulnerability in the Horde Passwd module prior to 2.2.2. The issue allows remote attackers to inject arbitrary web script or HTML via the parent frame page title. Affected component: Horde Passwd module. Root cause: insufficient input validatio...