Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-3330
HistoryJul 27, 2008 - 12:00 a.m.

CVE-2008-3330

2008-07-2700:00:00
ubuntu.com
ubuntu.com
15

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.004

Percentile

73.9%

Cross-site scripting (XSS) vulnerability in services/obrowser/index.php in
Horde 3.2 and Turba 2.2 allows remote attackers to inject arbitrary web
script or HTML via the contact name.

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.004

Percentile

73.9%