CVE-2005-3570

MEDIO 4.3CVE-2005-3570 · Published 16/11/2005 · updated 16/06/2026

In breve

CVE-2005-3570 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda horde (horde).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.7%, superiore al 77.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
horde horde	`= 2.2= 2.2.1= 2.2.3= 2.2.4= 2.2.4_rc1= 2.2.5= 2.2.6= 2.2.7= 2.2.8`	No fix yet

Description

Unspecified cross-site scripting (XSS) vulnerability in Horde before 2.2.9 allows remote attackers to inject arbitrary web script or HTML via "not properly escaped error messages".

References

cvs.horde.org/diff.php/horde/docs/CHANGES · Patch
lists.horde.org/archives/announce/2005/000231.html
secunia.com/advisories/17468 · Patch
secunia.com/advisories/17702 · Patch
secunia.com/advisories/17794 · Patch
debian.org/security/2005/dsa-914 · Patch
gentoo.org/security/en/glsa/glsa-200511-20.xml · Patch
securityfocus.com/bid/15409 · Patch
vupen.com/english/advisories/2005/2403 · Vendor Advisory

Altre vulnerabilità di horde

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

horde

= 2.2= 2.2.1= 2.2.3= 2.2.4= 2.2.4_rc1= 2.2.5= 2.2.6= 2.2.7= 2.2.8

No fix yet

Altre vulnerabilità di horde

Vedi tutto →