Cross-site scripting (XSS) vulnerability in horde 3 (horde3) before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) templates/problem/problem.inc and (2) test.php.

This update of horde fixes some cross-site-scripting vulnerabilities.
(CVE-2005-4190,CVE-2006-2195)

Michael Marek discovered that the Horde web application framework performs insufficient input sanitising, which might lead to the injection of web script code through cross-site scripting.

The remote host is affected by the vulnerability described in GLSA-200606-28 (Horde Web Application Framework: XSS vulnerability)

    Michael Marek discovered that the Horde Web Application Framework     performs insufficient input sanitizing.
  Impact :

    An attacker could exploit these vulnerabilities to execute arbitrary     scripts running in the context of the victim's browser.
  Workaround :

    There is no known workaround at this time.

FrSIRT advisory ADV-2006-2356 reports :

Multiple vulnerabilities have been identified in Horde Application Framework, which may be exploited by attackers to execute arbitrary scripting code. These flaws are due to input validation errors in the 'test.php' and 'templates/problem/problem.inc' scripts that do not validate the 'url', 'name', 'email', 'subject' and 'message' parameters, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Website.

ID	Name	Product	Family	Severity
27264	openSUSE 10 Security Update : horde (horde-1600)	Nessus	SuSE Local Security Checks	medium
22641	Debian DSA-1099-1 : horde2 - missing input sanitising	Nessus	Debian Local Security Checks	medium
22640	Debian DSA-1098-1 : horde3 - missing input sanitising	Nessus	Debian Local Security Checks	medium
21774	GLSA-200606-28 : Horde Web Application Framework: XSS vulnerability	Nessus	Gentoo Local Security Checks	medium
21730	FreeBSD : horde -- multiple parameter XSS vulnerabilities (09429f7c-fd6e-11da-b1cd-0050bf27ba24)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2006-2195

medium

Tenable Plugins

medium

medium

medium

medium

medium