1827 matches found
CVE-2006-3549
services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict its image proxy capability, which allows remote attackers to perform "Web tunneling" attacks and use the server as a proxy via 1 http, 2 https, and 3 ftp URL in the url parameter...
CVE-2006-3548
Multiple cross-site scripting XSS vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote attackers to inject arbitrary web script or HTML via a 1 javascript URI or an external 2 http, 3 https, or 4 ftp URI in the url parameter in services/go.php a...
CVE-2006-3549
services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict its image proxy capability, which allows remote attackers to perform "Web tunneling" attacks and use the server as a proxy via 1 http, 2 https, and 3 ftp URL in the url parameter...
CVE-2006-3549
The CVE-2006-3549 vulnerability affects Horde Application Framework (Horde3) where services/go.php does not properly restrict its image proxy capability, enabling remote attackers to perform Web tunneling and use the server as a proxy via http, https, or ftp URLs in the url parameter. Technical d...
CVE-2006-3548
CVE-2006-3548 is a set of XSS flaws in Horde Application Framework (versions 3.0.0–3.0.10 and 3.1.0–3.1.1) exploitable via (1) url in go.php, (2) http/https/ftp URI in various parameters, (3) javascript URI in module, (4) name in problem.php. Root cause is inadequate input sanitization that allow...
CVE-2006-3548
Multiple cross-site scripting XSS vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote attackers to inject arbitrary web script or HTML via a 1 javascript URI or an external 2 http, 3 https, or 4 ftp URI in the url parameter in services/go.php a...
CVE-2006-3549
services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict its image proxy capability, which allows remote attackers to perform "Web tunneling" attacks and use the server as a proxy via 1 http, 2 https, and 3 ftp URL in the url parameter...
horde3113010.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SA0011 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++ Horde 3.1.1, 3.0.10 Multiple Security Issues +++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PUBLISHED ON July 05, 2006 PUBLISHED AT...
FreeBSD : horde -- various problems in dereferrer (e94cb43d-0c4a-11db-9016-0050bf27ba24)
Horde 3.1.2 release announcement : Security Fixes : - Closed XSS problems in dereferrer IE only, help viewer and problem reporting screen. - Removed unused image proxy code from dereferrer. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
[Full-disclosure] Public Advisory: Horde 3.1.1, 3.0.10 Multiple Security Issues
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SA0011 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++ Horde 3.1.1, 3.0.10 Multiple Security Issues +++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PUBLISHED ON July 05, 2006 PUBLISHED AT...
Update Protection against Horde Help Viewer Vulnerability
The Horde Application Framework is a modular, general-purpose web application framework written in PHP. A vulnerability has been identified in Horde Application Framework, which may be exploited by attackers to compromise a vulnerable web server...
Horde < 3.0.11 / 3.1.2 Multiple Script XSS
The version of Horde installed on the remote host fails to validate input to the 'url' parameter of the 'services/go.php' script before using it in dynamically-generated content. An unauthenticated attacker may be able to leverage this issue to inject arbitrary HTML and script code into a user's...
Horde Web Application Framework: XSS vulnerability
Background The Horde Web Application Framework is a general-purpose web application framework written in PHP, providing classes for handling preferences, compression, browser detection, connection tracking, MIME, and more. Description Michael Marek discovered that the Horde Web Application...
FreeBSD : horde -- multiple parameter XSS vulnerabilities (09429f7c-fd6e-11da-b1cd-0050bf27ba24)
FrSIRT advisory ADV-2006-2356 reports : Multiple vulnerabilities have been identified in Horde Application Framework, which may be exploited by attackers to execute arbitrary scripting code. These flaws are due to input validation errors in the 'test.php' and 'templates/problem/problem.inc' scrip...
Cross site scripting
Cross-site scripting XSS vulnerability in horde 3 horde3 before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via 1 templates/problem/problem.inc and 2 test.php...
CVE-2006-2195
Cross-site scripting XSS vulnerability in horde 3 horde3 before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via 1 templates/problem/problem.inc and 2 test.php...
CVE-2006-2195
Cross-site scripting XSS vulnerability in horde 3 horde3 before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via 1 templates/problem/problem.inc and 2 test.php...
CVE-2006-2195
CVE-2006-2195 is a cross-site scripting (XSS) vulnerability in Horde 3 prior to 3.1.1 that allows remote attackers to inject arbitrary script/HTML via templates/problem/problem.inc and test.php. Root cause: insufficient input sanitisation in Horde web application framework. Affected product/versi...
[SECURITY] [DSA 1098-1] New horde3 packages fix cross-site scripting
-------------------------------------------------------------------------- Debian Security Advisory DSA 1098-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 14th, 2006 http://www.debian.org/security/faq -...
