CVE-2016-5303

CVE-2016-5303 affects Horde Groupware and Horde Groupware Webmail Edition (before 5.2.16). Vulnerable component: Horde Text Filter API. The issue allows remote attackers to inject arbitrary web script or HTML via crafted data:text/html content in a form (1) action or (2) xlink attribute, enabling...

CVE-2016-5303

Cross-site scripting XSS vulnerability in the Horde Text Filter API in Horde Groupware and Horde Groupware Webmail Edition before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via crafted data:text/html content in a form 1 action or 2 xlink attribute...

CVE-2016-5303

Cross-site scripting XSS vulnerability in the Horde Text Filter API in Horde Groupware and Horde Groupware Webmail Edition before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via crafted data:text/html content in a form 1 action or 2 xlink attribute...

Fedora Update for php-horde-Horde-Mime-Viewer FEDORA-2016-f5fda29032

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-horde-Horde-Text-Filter FEDORA-2016-de1bd3050f

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-horde-horde FEDORA-2016-c5b434fc32

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-horde-Horde-Core FEDORA-2016-866713edaf

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Horde Webmail < 5.2.16 Multiple Vulnerabilities

Horde Webmail is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:horde:hordegroupware"; if...

Fedora 25 : php-horde-horde (2016-c5b434fc32)

horde 5.2.12 - jan SECURITY: Add CSRF protection tokens to portal layout forms Reported by Florian Kllich. - jan Fix double loading of hooks.php. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted ...

Fedora 25 : php-horde-Horde-Core (2016-866713edaf)

HordeCore 2.26.1 - jan SECURITY: Add CSRF protection tokens to portal layout forms and fix open URL redirection Reported by Florian Kllich. - jan SECURITY: enable CSRF token for configuration form again Reported by Dawid Gounski via Beyond Security's SecuriTeam Secure Disclosure program. - mjr...

Fedora 25 : php-horde-Horde-Mime-Viewer (2016-f5fda29032)

HordeMimeViewer 2.2.1 - jan SECURITY: Don't render SVG images in the browser to avoid XSS attacks Reported by Dawid Gounski via Beyond Security's SecuriTeam Secure Disclosure program. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...

Fedora 25 : php-horde-Horde-Text-Filter (2016-de1bd3050f)

HordeTextFilter 2.3.5 - jan SECURITY: Fix XSS via data:text/html content of form action and xlink attributes Reported by Liuzhu. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

[SECURITY] Fedora 24 Update: php-horde-Horde-Core-2.26.1-1.fc24

These classes provide the core functionality of the Horde Application Framework...

[SECURITY] Fedora 24 Update: php-horde-Horde-Mime-Viewer-2.2.1-1.fc24

Provides rendering drivers for MIME data...

[SECURITY] Fedora 24 Update: php-horde-Horde-Text-Filter-2.3.5-1.fc24

Common methods for fitering and converting text...

[SECURITY] Fedora 24 Update: php-horde-horde-5.2.12-1.fc24

The Horde Application Framework is a flexible, modular, general-purpose web application framework written in PHP. It provides an extensive array of components that are targeted at the common problems and tasks involved in developing modern web applications. It is the basis for a large number of...

Fedora 23 : php-horde-Horde-Text-Filter (2016-084620f386)

HordeTextFilter 2.3.5 - jan SECURITY: Fix XSS via data:text/html content of form action and xlink attributes Reported by Liuzhu. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

Fedora Update for php-horde-Horde-Mime-Viewer FEDORA-2016-d9fc52c251

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-horde-horde FEDORA-2016-bf8d17758f

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-horde-Horde-Text-Filter FEDORA-2016-58bc2a649a

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...