CVE-2005-1315

CVE-2005-1315 describes a cross-site scripting (XSS) vulnerability in the Horde Turba module prior to 1.2.5. The flaw allows a remote attacker to inject arbitrary web script or HTML by crafting the parent’s frame page title. The vulnerability is associated with Horde Turba’s handling of the paren...