SUSE CVE-2010-3447

Cross-site scripting XSS vulnerability in view.php in the file viewer in Horde Gollem before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the file parameter in a viewfile action...

PT-2011-1403

Name of the Vulnerable Software and Affected Versions Horde Gollem versions prior to 1.1.2 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the file parameter in a "view file" action...