Vulnerability Details CVE-2005-3570
Unspecified cross-site scripting (XSS) vulnerability in Horde before 2.2.9 allows remote attackers to inject arbitrary web script or HTML via "not properly escaped error messages".
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 74.7%
CVSS Severity
CVSS v2 Score 4.3
References
- http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.207.2.109&r2=1.207.2.111&ty=h
- http://lists.horde.org/archives/announce/2005/000231.html
- http://secunia.com/advisories/17468
- http://secunia.com/advisories/17702
- http://secunia.com/advisories/17794
- http://www.debian.org/security/2005/dsa-914
- http://www.gentoo.org/security/en/glsa/glsa-200511-20.xml
- http://www.securityfocus.com/bid/15409
- http://www.vupen.com/english/advisories/2005/2403
- http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.207.2.109&r2=1.207.2.111&ty=h
- http://lists.horde.org/archives/announce/2005/000231.html
- http://secunia.com/advisories/17468
- http://secunia.com/advisories/17702
- http://secunia.com/advisories/17794
- http://www.debian.org/security/2005/dsa-914
- http://www.gentoo.org/security/en/glsa/glsa-200511-20.xml
- http://www.securityfocus.com/bid/15409
- http://www.vupen.com/english/advisories/2005/2403
Products affected by CVE-2005-3570
-
cpe:2.3:a:horde:horde:2.2
-
cpe:2.3:a:horde:horde:2.2.1
-
cpe:2.3:a:horde:horde:2.2.3
-
cpe:2.3:a:horde:horde:2.2.4
-
cpe:2.3:a:horde:horde:2.2.4_rc1
-
cpe:2.3:a:horde:horde:2.2.5
-
cpe:2.3:a:horde:horde:2.2.6
-
cpe:2.3:a:horde:horde:2.2.7
-
cpe:2.3:a:horde:horde:2.2.8