CVE-2012-0791
Publicada em · Atualizada em
25Vexday Risk Score
Priorize a correção. Ela exploração observada pelo VulnCheck.
ssvc Attendepss 2.3%
da publicação à arma
Publicada no NVD24 de jan.
VulnCheck+2585d
probabilidade de exploração
2.3%top 17% das CVEs
exploração observada
simVulnCheck
Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) composeCache, (2) rtemode, or (3) filename_* parameters to the compose page; (4) formname parameter to the contacts popup window; or (5) IMAP mailbox names. NOTE: some of these details are obtained from third party information.
Produtos afetados
n/a · n/aReferências
http://secunia.com/advisories/47580http://secunia.com/advisories/47592http://www.debian.org/security/2012/dsa-2485http://www.horde.org/apps/imp/docs/CHANGEShttp://www.horde.org/apps/imp/docs/RELEASE_NOTEShttp://www.horde.org/apps/webmail/docs/CHANGEShttp://www.horde.org/apps/webmail/docs/RELEASE_NOTEShttp://www.openwall.com/lists/oss-security/2012/01/22/2http://www.securityfocus.com/bid/51586http://www.securitytracker.com/id?1026553http://www.securitytracker.com/id?1026554