CVE-2008-3824

CVE-2008-3824 affects Horde 3.1.x before 3.1.9 and 3.2.x before 3.2.2, and Popoon (externalinput.php in Popoon r22196 and earlier). It is a cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary web script or HTML by using / characters as replacements for spaces in...