2039 matches found
CVE-2005-1320
Cross-site scripting XSS vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1318
Cross-site scripting XSS vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1321
Cross-site scripting XSS vulnerability in Horde Vacation module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-0961
Cross-site scripting XSS vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title...
CVE-2005-1315
Cross-site scripting XSS vulnerability in Horde Turba module before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-0378
Multiple cross-site scripting XSS vulnerabilities in Horde 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 group parameter to prefs.php or 2 url parameter to index.php...
GLSA-200505-01 : Horde Framework: Multiple XSS vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200505-01 Horde Framework: Multiple XSS vulnerabilities Cross-site scripting vulnerabilities have been discovered in various modules of the Horde Framework. Impact : These vulnerabilities could be exploited by an attacker to execu...
Horde Framework: Multiple XSS vulnerabilities
Background The Horde Framework is a PHP based framework for building web applications. It provides many modules including calendar, address book, CVS viewer and Internet Messaging Program. Description Cross-site scripting vulnerabilities have been discovered in various modules of the Horde...
[SA15081] Accounts Parent Frame Page Title Cross-Site Scripting Vulnerability
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Accounts Parent Frame Page Title Cross-Site Scripting...
[SA15075] Passwd Parent Frame Page Title Cross-Site Scripting Vulnerability
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Passwd Parent Frame Page Title Cross-Site Scripting...
CVE-2005-1322
Cross-site scripting XSS vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1318
The CVE-2005-1318 entry concerns Horde Forwards E-Mail Forwarding Manager prior to 2.2.2, which is vulnerable to cross-site scripting (XSS) via the parent frame page title. The affected component is the Forwarding Manager’s web interface; the root cause is improper handling of the frame title lea...
CVE-2005-1318
Cross-site scripting XSS vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1320
Cross-site scripting XSS vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1316
Cross-site scripting XSS vulnerability in Horde Accounts module before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1317
Cross-site scripting XSS vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1321
Cross-site scripting XSS vulnerability in Horde Vacation module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1319
Cross-site scripting XSS vulnerability in Horde IMP Webmail client before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...