[SECURITY] Fedora 25 Update: php-horde-horde-5.2.12-1.fc25

The Horde Application Framework is a flexible, modular, general-purpose web application framework written in PHP. It provides an extensive array of components that are targeted at the common problems and tasks involved in developing modern web applications. It is the basis for a large number of...

[SECURITY] Fedora 22 Update: php-horde-horde-5.2.9-1.fc22

The Horde Application Framework is a flexible, modular, general-purpose web application framework written in PHP. It provides an extensive array of components that are targeted at the common problems and tasks involved in developing modern web applications. It is the basis for a large number of...

[SECURITY] Fedora 22 Update: php-horde-Horde-Core-2.22.4-1.fc22

These classes provide the core functionality of the Horde Application Framework...

[SECURITY] Fedora 23 Update: php-horde-Horde-Core-2.22.4-1.fc23

These classes provide the core functionality of the Horde Application Framework...

[SECURITY] Fedora 21 Update: php-horde-horde-5.2.8-1.fc21

The Horde Application Framework is a flexible, modular, general-purpose web application framework written in PHP. It provides an extensive array of components that are targeted at the common problems and tasks involved in developing modern web applications. It is the basis for a large number of...

DSA-3391-1 php-horde - security update

Bulletin has no description...

Debian Security Advisory DSA 3391-1 (php-horde - security update)

It was discovered that the web-based administration interface in the Horde Application Framework did not guard against Cross-Site Request Forgery CSRF attacks. As a result, other, malicious web pages could cause Horde applications to perform actions as the Horde user. The oldstable distribution...

Debian: Security Advisory (DSA-3391-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 22 Update: php-horde-Horde-Form-2.0.10-1.fc22

The HordeForm package provides form rendering, validation, and other functionality for the Horde Application Framework...

[SECURITY] Fedora 21 Update: php-horde-Horde-Core-2.20.6-1.fc21

These classes provide the core functionality of the Horde Application Framework...

CVE-2010-3077

Cross-site scripting XSS vulnerability in util/iconbrowser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML via the subdir parameter...

CVE-2010-3694

Cross-site request forgery CSRF vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form...

CVE-2010-3077

Cross-site scripting XSS vulnerability in util/iconbrowser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML via the subdir parameter...

CVE-2010-3077

The CVE-2010-3077 issue is a cross-site scripting (XSS) vulnerability in Horde Application Framework (util/icon_browser.php) before version 3.3.9 that allows remote attackers to inject arbitrary web script or HTML via the subdir parameter. Affected product: Horde/Horde3 web framework (before 3.3....

CVE-2010-3694

CVE-2010-3694 is a CSRF vulnerability in the Horde Application Framework prior to 3.3.9 that can hijack a victim’s authentication for requests to a preference form. Affected product: Horde/ Horde3 (before 3.3.9); root cause: CSRF on the preference form. Impact per CVSS2: partial confidentiality, ...

CVE-2010-3694

Cross-site request forgery CSRF vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form...

CVE-2010-3077

Cross-site scripting XSS vulnerability in util/iconbrowser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML via the subdir parameter...

XSS in Horde Application Framework <=3.3.8, icon_browser.php

Hi, Horde Application Framework v3.3.8 and lower are subject to a cross site scripting XSS vulnerability. The iconbrowser.php script fails to properly sanitize user supplied input to the 'subdir' URL parameter before printing it out as part of a HTML formatted error message. The following URL can...

Horde Application Framework 3.3.8 Cross Site Scripting

Hi, Horde Application Framework v3.3.8 and lower are subject to a cross site scripting XSS vulnerability. The iconbrowser.php script fails to properly sanitize user supplied input to the 'subdir' URL parameter before printing it out as part of a HTML formatted error message. The following URL can...

Horde util/icon_browser.php subdir Parameter XSS

The version of the Horde application framework hosted on the remote web server fails to sanitize user input to the 'subdir' parameter of the 'util/iconbrowser.php' script before using it to generate dynamic HTML output. An attacker may be able to leverage this issue to inject arbitrary HTML or...