CVE-2008-6746

MEDIUM 4.3CVE-2008-6746 · Published 23/04/2009 · updated 16/06/2026

In short

CVE-2008-6746 is a MEDIUM (CVSS 4.3) vulnerability affecting turba h3 (horde).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
turba h3 horde	`= 0.0.1= 0.0.2= 0.0.3= 1.0= 1.1= 1.2= 1.2.1= 1.2.2= 1.2.3= 1.2.4= 1.2.5= 2.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.1= 2.1.1= 2.1.2= 2.1.3= 2.1.4= 2.1.5= 2.1.6= 2.1.7= 2.2≤ 2.2`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the contact display view in Turba Contact Manager H3 before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the contact name.

References

cvs.horde.org/diff.php/turba/docs/CHANGES
lists.horde.org/archives/announce/2008/000414.html
secunia.com/advisories/30704 · Vendor Advisory
securityfocus.com/bid/29743
exchange.xforce.ibmcloud.com/vulnerabilities/43098

More vulnerabilities in turba h3

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free