58 matches found
Gentoo Security Advisory GLSA 200805-01 (horde)
The remote host is missing updates announced in advisory GLSA 200805-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
FreeBSD Ports: nag
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: nag
The remote host is missing an update to the system as announced in the referenced advisory. VID ee6b5956-6a89-11da-b96e-000fb586ba73 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD : nag -- XSS vulnerabilities in several of the tasklist name and task data fields (ee6b5956-6a89-11da-b96e-000fb586ba73)
Announce of Nag H3 2.0.4 final : This 2.0.4 is a security release that fixes cross site scripting vulnerabilities in several of the tasklist name and task data fields. None of the vulnerabilities can be exploited by unauthenticated users; however, we strongly recommend that all users of Nag 2.0.3...
gollem, horde, imp, ingo, kronolith, mnemo, nag, turba security update
CentOS Errata and Security Advisory CESA-2006:0412-001 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2006-April/074970.html https://lists.centos.org/pipermail/centos-announce/2006-April/074971.html Affected packages: gollem-h3 horde imp-h3 ingo-h3...
SEC-20051211-0.txt
SEC Consult Security Advisory ========================================================================== title: program: vulnerable version: homepage: found: by: / SEC Consult / www.sec-consult.com ========================================================================== ------------------- vend...
CVE-2005-4190
Multiple cross-site scripting XSS vulnerabilities in Horde Application Framework before 3.0.8 allow remote authenticated users to inject arbitrary web script or HTML via multiple vectors, as demonstrated by 1 the identity field, 2 Category and 3 Label search fields, 4 the Mobile Phone field, and ...
CVE-2005-4191
Multiple cross-site scripting XSS vulnerabilities in templates/tasklists/tasklists.inc in Horde Nag Task List Manager H3 before 2.0.4 allow remote authenticated users to inject arbitrary web script or HTML via 1 the tasklist's name or 2 description, when creating a new tasklist...
CVE-2005-4191
The CVE applies to Horde Nag Task List Manager H3, vulnerable in versions before 2.0.4 due to XSS in templates/tasklists/tasklists.inc (tasklist name/description). The root cause is cross‑site scripting in tasklists.inc, enabling remote authenticated users to inject arbitrary script/HTML when cre...
SEC Consult SA-20051211-0 :: Several XSS issues in Horde Framework, Kronolith Calendar, Mnemo Notes, Nag Tasks and Turba Addressbook
SEC Consult Security Advisory 20051211-0 ========================================================================== title: Several XSS issues in Horde Framework, Kronolith Calendar, Mnemo Notes, Nag Tasks and Turba Addressbook program: Horde Application Framework + Modules vulnerable version:...
nag -- Cross site scripting vulnerabilities in several of the tasklist name and task data fields
Announce of Nag H3 2.0.4 final: This 2.0.4 is a security release that fixes cross site scripting vulnerabilities in several of the tasklist name and task data fields. None of the vulnerabilities can be exploited by unauthenticated users; however, we strongly recommend that all users of Nag 2.0.3...
CVE-2005-1322
Cross-site scripting XSS vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
[SA15079] Nag Parent Frame Page Title Cross-Site Scripting Vulnerability
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Nag Parent Frame Page Title Cross-Site Scripting...
CVE-2005-1322
CVE-2005-1322 affects the Horde Nag Task List Manager prior to 1.1.3, where a cross-site scripting (XSS) flaw allows remote attackers to inject arbitrary script or HTML via the parent frame page title. The vulnerability arises in the Nag web interface’s handling of the parent frame title, enablin...
CVE-2005-1322
Cross-site scripting XSS vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
Horde Nag common-footer.inc Parent Frame Page Title XSS
According to its version, the remote installation of Nag fails to fully sanitize user-supplied input when setting the parent frame's page title by JavaScript in 'templates/common-footer.inc'. By leveraging this flaw, an attacker may be able to inject arbitrary HTML and script code into a user's...
Horde Nag Detection
The remote host is running Nag, an open source PHP-based multi-user task list manager from the Horde Project. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18135; scriptversion"1.23"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...