CVE-2009-2360

CVE-2009-2360 is an XSS vulnerability in Horde Passwd (passwd/main.php) where the backend parameter is not properly sanitized in Horde before version 3.1.1. The flaw could allow remote attackers to inject web script/HTML. Documents indicate this issue is part of a set of Horde vulnerabilities (GL...

CVE-2005-1313

CVE-2005-1313 describes a cross-site scripting (XSS) vulnerability in the Horde Passwd module prior to 2.2.2. The issue allows remote attackers to inject arbitrary web script or HTML via the parent frame page title. Affected component: Horde Passwd module. Root cause: insufficient input validatio...