Lucene search

MitreCVE-2006-4255

HistoryAug 21, 2006 - 8:04 p.m.

CVE-2006-4255

2006-08-2120:04:00

mitre

web.nvd.nist.gov

cve

2006

4255

cross-site scripting

xss

vulnerability

horde

imp

remote attackers

web script

html

folder names

vfolder_label

form field

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.007

Percentile

80.2%

JSON

Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors related to folder names, as injected into the vfolder_label form field in the IMP search screen.

Affected configurations

Nvd

Node

hordehordeMatch3.0

hordehordeMatch3.0.1

hordehordeMatch3.0.2

hordehordeMatch3.0.3

hordehordeMatch3.0.4

hordehordeMatch3.0.4_rc1

hordehordeMatch3.0.4_rc2

hordehordeMatch3.0.6

hordehordeMatch3.0.7

hordehordeMatch3.0.8

hordehordeMatch3.0.9

hordehordeMatch3.1

hordehordeMatch3.1.1

hordeimpMatch2.0

hordeimpMatch2.2

hordeimpMatch2.2.1

hordeimpMatch2.2.2

hordeimpMatch2.2.3

hordeimpMatch2.2.4

hordeimpMatch2.2.5

hordeimpMatch2.2.6

hordeimpMatch2.2.7

hordeimpMatch2.2.8

hordeimpMatch2.3

hordeimpMatch3.0

hordeimpMatch3.1

hordeimpMatch3.1.2

hordeimpMatch3.2

hordeimpMatch3.2.1

hordeimpMatch3.2.2

hordeimpMatch3.2.3

hordeimpMatch3.2.4

hordeimpMatch3.2.5

hordeimpMatch4.0

hordeimpMatch4.0.1

hordeimpMatch4.0.2

hordeimpMatch4.0.3

hordeimpMatch4.0.4

VendorProductVersionCPE
hordehorde3.0cpe:2.3:a:horde:horde:3.0:*:*:*:*:*:*:*
hordehorde3.0.1cpe:2.3:a:horde:horde:3.0.1:*:*:*:*:*:*:*
hordehorde3.0.2cpe:2.3:a:horde:horde:3.0.2:*:*:*:*:*:*:*
hordehorde3.0.3cpe:2.3:a:horde:horde:3.0.3:*:*:*:*:*:*:*
hordehorde3.0.4cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
hordehorde3.0.4_rc1cpe:2.3:a:horde:horde:3.0.4_rc1:*:*:*:*:*:*:*
hordehorde3.0.4_rc2cpe:2.3:a:horde:horde:3.0.4_rc2:*:*:*:*:*:*:*
hordehorde3.0.6cpe:2.3:a:horde:horde:3.0.6:*:*:*:*:*:*:*
hordehorde3.0.7cpe:2.3:a:horde:horde:3.0.7:*:*:*:*:*:*:*
hordehorde3.0.8cpe:2.3:a:horde:horde:3.0.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
horde	horde	3.0	cpe:2.3:a:horde:horde:3.0:::::::*
horde	horde	3.0.1	cpe:2.3:a:horde:horde:3.0.1:::::::*
horde	horde	3.0.2	cpe:2.3:a:horde:horde:3.0.2:::::::*
horde	horde	3.0.3	cpe:2.3:a:horde:horde:3.0.3:::::::*
horde	horde	3.0.4	cpe:2.3:a:horde:horde:3.0.4:::::::*
horde	horde	3.0.4_rc1	cpe:2.3:a:horde:horde:3.0.4_rc1:::::::*
horde	horde	3.0.4_rc2	cpe:2.3:a:horde:horde:3.0.4_rc2:::::::*
horde	horde	3.0.6	cpe:2.3:a:horde:horde:3.0.6:::::::*
horde	horde	3.0.7	cpe:2.3:a:horde:horde:3.0.7:::::::*
horde	horde	3.0.8	cpe:2.3:a:horde:horde:3.0.8:::::::*

Rows per page:

1-10 of 381

References

lists.horde.org/archives/announce/2006/000294.html

secunia.com/advisories/21533

securityreason.com/securityalert/1423

securitytracker.com/id?1016713

www.scip.ch/cgi-bin/smss/showadvf.pl?id=2457

www.securityfocus.com/archive/1/443361/100/0/threaded

www.securityfocus.com/bid/19544

www.vupen.com/english/advisories/2006/3316

exchange.xforce.ibmcloud.com/vulnerabilities/28409

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.007

Percentile

80.2%

JSON

Related for CVE-2006-4255