CVE-2009-2360

MEDIO 4.3CVE-2009-2360 · Published 08/07/2009 · updated 16/06/2026

In breve

CVE-2009-2360 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda passwd (horde).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 5.1%, superiore al 92.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
passwd horde	`= 2.0= 2.1= 2.2= 2.2.1= 2.2.2≤ 3.1`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in passwd/main.php in the Passwd module before 3.1.1 for Horde allows remote attackers to inject arbitrary web script or HTML via the backend parameter.

References

bugs.horde.org/ticket/8398
lists.horde.org/archives/announce/2009/000507.html · Patch
secunia.com/advisories/35720 · Vendor Advisory
secunia.com/advisories/35769
debian.org/security/2009/dsa-1829
securityfocus.com/bid/35573 · Exploit
vupen.com/english/advisories/2009/1784 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/51542

Altre vulnerabilità di passwd

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free