Lucene search

MitreCVE-2006-3548

HistoryJul 13, 2006 - 12:05 a.m.

CVE-2006-3548

2006-07-1300:05:00

mitre

web.nvd.nist.gov

cve

2006

3548

xss

vulnerabilities

horde application framework

remote attackers

web script

html

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.013

Percentile

85.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote attackers to inject arbitrary web script or HTML via a (1) javascript URI or an external (2) http, (3) https, or (4) ftp URI in the url parameter in services/go.php (aka the dereferrer), (5) a javascript URI in the module parameter in services/help (aka the help viewer), and (6) the name parameter in services/problem.php (aka the problem reporting screen).

Affected configurations

Nvd

Node

hordehordeMatch3.0

hordehordeMatch3.0.1

hordehordeMatch3.0.2

hordehordeMatch3.0.3

hordehordeMatch3.0.4

hordehordeMatch3.0.4_rc1

hordehordeMatch3.0.4_rc2

hordehordeMatch3.0.6

hordehordeMatch3.0.7

hordehordeMatch3.0.8

hordehordeMatch3.0.9

hordehordeMatch3.1

hordehordeMatch3.1.1

VendorProductVersionCPE
hordehorde3.0cpe:2.3:a:horde:horde:3.0:*:*:*:*:*:*:*
hordehorde3.0.1cpe:2.3:a:horde:horde:3.0.1:*:*:*:*:*:*:*
hordehorde3.0.2cpe:2.3:a:horde:horde:3.0.2:*:*:*:*:*:*:*
hordehorde3.0.3cpe:2.3:a:horde:horde:3.0.3:*:*:*:*:*:*:*
hordehorde3.0.4cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
hordehorde3.0.4_rc1cpe:2.3:a:horde:horde:3.0.4_rc1:*:*:*:*:*:*:*
hordehorde3.0.4_rc2cpe:2.3:a:horde:horde:3.0.4_rc2:*:*:*:*:*:*:*
hordehorde3.0.6cpe:2.3:a:horde:horde:3.0.6:*:*:*:*:*:*:*
hordehorde3.0.7cpe:2.3:a:horde:horde:3.0.7:*:*:*:*:*:*:*
hordehorde3.0.8cpe:2.3:a:horde:horde:3.0.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
horde	horde	3.0	cpe:2.3:a:horde:horde:3.0:::::::*
horde	horde	3.0.1	cpe:2.3:a:horde:horde:3.0.1:::::::*
horde	horde	3.0.2	cpe:2.3:a:horde:horde:3.0.2:::::::*
horde	horde	3.0.3	cpe:2.3:a:horde:horde:3.0.3:::::::*
horde	horde	3.0.4	cpe:2.3:a:horde:horde:3.0.4:::::::*
horde	horde	3.0.4_rc1	cpe:2.3:a:horde:horde:3.0.4_rc1:::::::*
horde	horde	3.0.4_rc2	cpe:2.3:a:horde:horde:3.0.4_rc2:::::::*
horde	horde	3.0.6	cpe:2.3:a:horde:horde:3.0.6:::::::*
horde	horde	3.0.7	cpe:2.3:a:horde:horde:3.0.7:::::::*
horde	horde	3.0.8	cpe:2.3:a:horde:horde:3.0.8:::::::*