1. CVE-Search
  2. CVE-2006-2195
ID CVE-2006-2195
Summary Cross-site scripting (XSS) vulnerability in horde 3 (horde3) before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) templates/problem/problem.inc and (2) test.php. This vulnerability is addressed in the following product release: Horde, Horde, 3.1.1
References
Vulnerable Configurations
  • cpe:2.3:a:horde:horde:3.0:*:*:*:*:*:*:*
    cpe:2.3:a:horde:horde:3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:horde:horde:3.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:horde:horde:3.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:horde:horde:3.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:horde:horde:3.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:horde:horde:3.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:horde:horde:3.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:horde:horde:3.0.4_rc1:*:*:*:*:*:*:*
    cpe:2.3:a:horde:horde:3.0.4_rc1:*:*:*:*:*:*:*
  • cpe:2.3:a:horde:horde:3.0.4_rc2:*:*:*:*:*:*:*
    cpe:2.3:a:horde:horde:3.0.4_rc2:*:*:*:*:*:*:*
  • cpe:2.3:a:horde:horde:3.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:horde:horde:3.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:horde:horde:3.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:horde:horde:3.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:horde:horde:3.0.8:*:*:*:*:*:*:*
    cpe:2.3:a:horde:horde:3.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:horde:horde:*:*:*:*:*:*:*:*
    cpe:2.3:a:horde:horde:*:*:*:*:*:*:*:*
CVSS
Base: 6.8 (as of 20-07-2017 - 01:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:P
refmap via4
bid 18436
confirm
debian
  • DSA-1098
  • DSA-1099
gentoo GLSA-200606-28
misc http://overlays.gentoo.org/dev/chtekk/browser/horde/www-apps/horde/files/horde-3.1.1-xss.diff?rev=4&format=txt
osvdb
  • 26513
  • 26514
sectrack 1016310
secunia
  • 20661
  • 20672
  • 20750
  • 20849
  • 20960
suse SUSE-SR:2006:016
vupen ADV-2006-2356
xf horde-test-problem-xss(27168)
Last major update 20-07-2017 - 01:31
Published 15-06-2006 - 10:02
Last modified 20-07-2017 - 01:31
Back to Top