exploits , vulnerabilities , articles , Multiple Horde Products Cross-Site Scripting Vulnerabilities and File Overwrite Vulnerability

Title	Multiple Horde Products Cross-Site Scripting Vulnerabilities and File Overwrite Vulnerability
Published	2009-09-14-12:00AM
Updated	2009-09-14-07:01PM
Class	Input Validation Error
CVE
Remote	Yes
Local	No
Credit	Stefan Esser from SektionEins, Martin Geisler, David Wharton
Vulnerable	Horde Horde 3.3.4 Horde Horde 3.3.3 Horde Horde 3.3.2 Horde Horde 3.3.1 Horde Horde 3.3 Horde Horde 3.2.4 Horde Horde 3.2.3 Horde Horde 3.2.3 Horde Horde 3.2.2 Horde Horde 3.2.1 Horde Horde 3.2 Horde Groupware Webmail Edition 1.1.5 Horde Groupware Webmail Edition 1.1.4 Horde Groupware Webmail Edition 1.1.3 Horde Groupware Webmail Edition 1.1.3 Horde Groupware Webmail Edition 1.1.2 Horde Groupware Webmail Edition 1.1.1 Horde Groupware Webmail Edition 1.0.8 Horde Groupware Webmail Edition 1.0.7 Horde Groupware Webmail Edition 1.0.6 Horde Groupware Webmail Edition 1.0.5 Horde Groupware Webmail Edition 1.0.4 Horde Groupware Webmail Edition 1.0.3 Horde Groupware Webmail Edition 1.0RC2 Horde Groupware Webmail Edition 1.0 Horde Groupware Webmail Edition 0 Horde Groupware 1.1.5 Horde Groupware 1.1.4 Horde Groupware 1.1.3 Horde Groupware 1.1.3 Horde Groupware 1.1.2 Horde Groupware 1.1.1 Horde Groupware 1.0.7 Horde Groupware 1.0.6 Horde Groupware 1.0.5 Horde Groupware 1.0.4 Horde Groupware 1.0.3 Horde Groupware 1.0.2 Horde Groupware 1.0RC3 Horde Groupware 1.0 Horde Groupware 0
Not Vulnerable	Horde Horde 3.3.5 Horde Horde 3.2.5 Horde Groupware Webmail Edition 1.1.6 Horde Groupware 1.1.6
Code	An attacker can exploit these issues via a browser. To exploit a cross-site scripting vulnerability, the attacker must entice an unsuspecting user into following a malicious URI.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-19 Serv-U File Server User Directory Information Disclosure Vulnerability
2009-12-18 ReVou Comment Field HTML Injection Vulnerability
2009-12-18 Adobe Flash Media Server Resource Exhaustion Remote Denial of Service Vulnerability
2009-12-18 Centreon Authentication Mechanism Security Bypass Vulnerability
2009-12-18 Family Connections Multiple Input Validation Vulnerabilities
2009-12-18 Drupal Contact and Menu Modules Multiple HTML Injection Vulnerabilities
2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities