CVE-2008-2783

CVE-2008-2783 describes multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, including Groupware Webmail Edition and Kronolith. The flaws allow remote attackers to inject arbitrary script or HTML via the timestamp parameter to week.php, workweek.php, and day.php, and via the ho...

CVE-2006-6175

CVE-2006-6175 affects Horde Kronolith (lib/FBView.php) where a raw unfiltered string enables directory traversal with a .. sequence in the view parameter, allowing an authenticated or remote attacker to include arbitrary files and execute PHP code. Affected: Kronolith H3 < 2.0.7 and Kronolith ...

CVE-2005-1314

The vulnerability CVE-2005-1314 affects the Horde Kronolith module prior to version 1.1.4. It is an XSS in the web UI that allows a remote attacker to inject arbitrary script or HTML via the parent frame page title. Impact is cross-site scripting; the document does not provide exploitation detail...