Lucene search

[email protected]CVE-2008-3824

HistorySep 12, 2008 - 4:56 p.m.

CVE-2008-3824

2008-09-1216:56:20

CWE-79

[email protected]

web.nvd.nist.gov

cve-2008-3824

cross-site scripting

xss vulnerability

horde 3.1.x

horde 3.2.x

popoon r22196

remote attackers

html e-mail

script injection

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.009

Percentile

83.1%

JSON

Cross-site scripting (XSS) vulnerability in (1) Text_Filter/Filter/xss.php in Horde 3.1.x before 3.1.9 and 3.2.x before 3.2.2 and (2) externalinput.php in Popoon r22196 and earlier allows remote attackers to inject arbitrary web script or HTML by using / (slash) characters as replacements for spaces in an HTML e-mail message.

Affected configurations

NVD

Node

hordehordeMatch3.1.1

hordehordeMatch3.1.2

hordehordeMatch3.1.3

hordehordeMatch3.1.4

hordehordeMatch3.1.5

hordehordeMatch3.1.6

hordehordeMatch3.1.7

hordehordeMatch3.1.8

hordehordeMatch3.2

hordehordeMatch3.2.1

popoonpopoonRange≤r22196

VendorProductVersionCPE
hordehorde3.2cpe:/a:horde:horde:3.2:::
hordehorde3.1.1cpe:/a:horde:horde:3.1.1:::
hordehorde3.1.5cpe:/a:horde:horde:3.1.5:::
hordehorde3.1.4cpe:/a:horde:horde:3.1.4:::
popoonpopooncpe:/a:popoon:popoon::::
hordehorde3.2.1cpe:/a:horde:horde:3.2.1:::
hordehorde3.1.8cpe:/a:horde:horde:3.1.8:::
hordehorde3.1.6cpe:/a:horde:horde:3.1.6:::
hordehorde3.1.2cpe:/a:horde:horde:3.1.2:::
hordehorde3.1.7cpe:/a:horde:horde:3.1.7:::

Vendor	Product	Version	CPE
horde	horde	3.2	cpe:/a:horde:horde:3.2:::
horde	horde	3.1.1	cpe:/a:horde:horde:3.1.1:::
horde	horde	3.1.5	cpe:/a:horde:horde:3.1.5:::
horde	horde	3.1.4	cpe:/a:horde:horde:3.1.4:::
popoon	popoon		cpe:/a:popoon:popoon::::
horde	horde	3.2.1	cpe:/a:horde:horde:3.2.1:::
horde	horde	3.1.8	cpe:/a:horde:horde:3.1.8:::
horde	horde	3.1.6	cpe:/a:horde:horde:3.1.6:::
horde	horde	3.1.2	cpe:/a:horde:horde:3.1.2:::
horde	horde	3.1.7	cpe:/a:horde:horde:3.1.7:::