CVE-2005-1315

CVE-2005-1315 describes a cross-site scripting (XSS) vulnerability in the Horde Turba module prior to 1.2.5. The flaw allows a remote attacker to inject arbitrary web script or HTML by crafting the parent’s frame page title. The vulnerability is associated with Horde Turba’s handling of the paren...

CVE-2005-1315: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Horde Turba module before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2005-1317: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2005-1316: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Horde Accounts module before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2005-1321: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Horde Vacation module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2005-1322: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2005-1313: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Horde Passwd module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2005-1314: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Horde Kronolith module before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2005-1319: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Horde IMP Webmail client before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2005-1320: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2005-1318: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

Horde Imp < 3.2.8 Parent Frame Page Title XSS

Binary data 2856.prm...

Horde Kronolith Multiple XSS (deprecated)

Binary data 2858.prm...

Horde Turba < 1.2.5 Parent Frame Page Title XSS

Binary data 2857.prm...

Horde Mnemo Detection

The remote host is running Mnemo, an open source PHP-based note manager from the Horde Project. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18133; scriptversion"1.23"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"Hor...

Horde Turba Contact Manager common-footer.inc Parent Frame Page Title XSS

According to its version, the remote installation of Horde fails to fully sanitize user-supplied input when setting the parent frame's page title by JavaScript in 'templates/common-footer.inc'. By leveraging this flaw, an attacker may be able to inject arbitrary HTML and script code into a user's...

Horde Turba Detection

The remote host is running Turba, a PHP-based addressbook / contact management utility from the Horde Project. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18137; scriptversion"1.24"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...

Horde Turba common-footer.inc Parent Frame Page Title XSS

According to its version, the remote installation of Turba fails to fully sanitize user-supplied input when setting the parent frame's page title by JavaScript in 'templates/common-footer.inc'. By leveraging this flaw, an attacker may be able to inject arbitrary HTML and script code into a user's...

Horde Nag Detection

The remote host is running Nag, an open source PHP-based multi-user task list manager from the Horde Project. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18135; scriptversion"1.23"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...

Horde Nag common-footer.inc Parent Frame Page Title XSS

According to its version, the remote installation of Nag fails to fully sanitize user-supplied input when setting the parent frame's page title by JavaScript in 'templates/common-footer.inc'. By leveraging this flaw, an attacker may be able to inject arbitrary HTML and script code into a user's...