CVE-2010-3695

CVE-2010-3695 is a cross-site scripting (XSS) vulnerability in Horde IMP (before 4.3.8) and Horde Groupware Webmail Edition (before 1.2.7). The flaw allows remote attackers to inject arbitrary web script or HTML via the fm_id parameter in the fetchmail_prefs_save action (Fetchmail configuration)....

CVE-2010-3695: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via the fmid parameter in a fetchmailprefssave action, related to the Fetchmail configuration...

DSA-2204-1 imp4 - Insufficient input sanitising

Bulletin has no description...

[SECURITY] Fedora 12 Update: horde-3.3.9-1.fc12

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

FreeBSD Ports: horde-imp

The remote host is missing an update to the system as announced in the referenced advisory. VID 6c4db192-cb23-11df-9c1b-0011098ad87f OpenVAS Vulnerability Test $ Description: Auto generated from VID 6c4db192-cb23-11df-9c1b-0011098ad87f Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: horde-imp

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : horde-imp -- XSS vulnerability (6c4db192-cb23-11df-9c1b-0011098ad87f)

The Horde team reports : Thanks to Naumann IT Security Consulting for reporting the XSS vulnerability. The major changes compared to IMP version H3 4.3.7 are : Fixed an XSS vulnerability in the Fetchmail configuration. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Horde IMP Webmail fetchmailprefs.php存储式跨站脚本漏洞

BUGTRAQ ID: 43515 IMP是一款基于Web的强大的邮件程序，由Horde项目组开发，可使用在Linux/Unix或者Windows操作系统下。 IMP Webmail没有正确地过滤提交给fetchmailprefs.php脚本的fmid URL参数，远程攻击者可以通过提交恶意URL请求执行存储式跨站脚本攻击。当用户访问邮件获取偏好页面时就会执行所注入的代码。 Horde IMP 4.3.7 厂商补丁： Horde ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Horde IMP Webmail 'fetchmailprefs.php' HTML Injection Vulnerability

Horde IMP Webmail is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data before it is used in dynamic content. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal...

horde-imp -- XSS vulnerability

The Horde team reports: Thanks to Naumann IT Security Consulting for reporting the XSS vulnerability. The major changes compared to IMP version H3 4.3.7 are: Fixed an XSS vulnerability in the Fetchmail configuration...

Horde IMP 4.3.7 Cross Site Scripting

Hi, Horde IMP v4.3.7 and lower are subject to a cross site scripting XSS vulnerability: The fetchmailprefs.php script fails to properly sanitize user supplied input to the 'fmid' URL parameter. If exploited, injected code will be persistent persistent XSS and will execute once the user manually...

Horde IMP Webmail 'fetchmailprefs.php' HTML Injection Vulnerability

Horde IMP Webmail is prone to an HTML injection vulnerability because it fails to sufficiently sanitize user-supplied data before it is used in dynamic content. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

XSS in Horde IMP <=4.3.7, fetchmailprefs.php

Hi, Horde IMP v4.3.7 and lower are subject to a cross site scripting XSS vulnerability: The fetchmailprefs.php script fails to properly sanitize user supplied input to the 'fmid' URL parameter. If exploited, injected code will be persistent persistent XSS and will execute once the user manually...

Horde IMP Webmail 4.3.7 - 'fetchmailprefs.php' HTML Injection

source: https://www.securityfocus.com/bid/43515/info Horde IMP Webmail is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data before it is used in dynamic content. Attacker-supplied HTML or JavaScript code could run in the context of the affected...

Horde IMP Webmail 4.3.7 - fetchmailprefs.php HTML Injection

Horde IMP Webmail 4.3.7 - fetchmailprefs.php HTML Injection source: https://www.securityfocus.com/bid/43515/info Horde IMP Webmail is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data before it is used in dynamic content. Attacker-supplied HTML ...

Fedora Update for imp FEDORA-2010-11399

Check for the Version of imp OpenVAS Vulnerability Test Fedora Update for imp FEDORA-2010-11399 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for imp FEDORA-2010-11432

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for imp FEDORA-2010-11432

Check for the Version of imp OpenVAS Vulnerability Test Fedora Update for imp FEDORA-2010-11432 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for imp FEDORA-2010-11399

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 12 Update: imp-4.3.7-1.fc12

IMP is the Internet Messaging Program, one of the Horde applications. It provides webmail access to IMAP and POP3 accounts. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information including help with IMP please visit http://www.horde.org...