Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

horde: missing input sanitizing

Package(s):

horde

CVE #(s):

CVE-2006-2195

Created:

June 15, 2006

Updated:

June 29, 2006

Description:

The Horde3 web application framework does not perform sufficient input sanitizing, allowing the possible injection of web script code through a cross-site scripting attack.

Alerts:

Gentoo	200606-28	2006-06-29
Debian	DSA-1099-1	2006-06-14
Debian	DSA-1098-1	2006-06-14

(Log in to post comments)