openSUSE Security Update : horde4-kronolith (openSUSE-SU-2012:1625-1)

This version update to version 3.0.18 addresses bnc791184: Two sets 3.0.17 and 3.0.18 of XSS flaws CVE-2012-5566 and CVE-2012-5567 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2012-5567

CVE-2012-5567 affects Horde Kronolith (H4) before 3.0.18, as used in Horde Groupware Webmail Edition before 4.0.9. The flaw is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script/HTML via crafted event location parameters in the month, monthlist, or ...