CVE-2006-2195

MEDIUM 6.8CVE-2006-2195 · Published 15/06/2006 · updated 16/06/2026

In short

CVE-2006-2195 is a MEDIUM (CVSS 6.8) vulnerability affecting horde (horde).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
horde horde	`= 3.0= 3.0.1= 3.0.2= 3.0.3= 3.0.4= 3.0.4_rc1= 3.0.4_rc2= 3.0.6= 3.0.7= 3.0.8≤ 3.0.9`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in horde 3 (horde3) before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) templates/problem/problem.inc and (2) test.php.

References

bugs.gentoo.org/show_bug.cgi
cvs.horde.org/diff.php
cvs.horde.org/diff.php
overlays.gentoo.org/dev/chtekk/browser/horde/www-apps/horde/files/horde-3.1.1-xss.diff
secunia.com/advisories/20661
secunia.com/advisories/20672 · Vendor Advisory
secunia.com/advisories/20750 · Vendor Advisory
secunia.com/advisories/20849 · Vendor Advisory
secunia.com/advisories/20960
securitytracker.com/id
debian.org/security/2006/dsa-1098 · Patch
debian.org/security/2006/dsa-1099
gentoo.org/security/en/glsa/glsa-200606-28.xml
novell.com/linux/security/advisories/2006_16_sr.html

More vulnerabilities in horde

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free