Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

horde: cross site scripting vulnerability

Package(s):

horde

CVE #(s):

CVE-2005-3570

Created:

November 23, 2005

Updated:

December 1, 2005

Description:

Horde has a potential cross site scripting vulnerability. Error messages are not properly escaped. A user can be tricked into executing arbitrary scripts by reading specially crafted email messages, or using a maliciously created URL.

Alerts:

Debian	DSA-914-1	2005-12-01
Gentoo	200511-20	2005-11-22

(Log in to post comments)