CVE-2002-0181 Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and steal cookies of other IMP/HORDE users via the script parame...
HighCVSS 7.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and steal cookies of other IMP/HORDE users via the script parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| horde | = 1.2.7 | No fix listed |
| horde imp | = 2.2.8 | No fix listed |
References
- bugs.horde.org
- CLA-2001:473 vendor-advisory
- 20020406 IMP 2.2.8 (SECURITY) released mailing-list
- CSSA-2002-016.1 vendor-advisory
- DSA-126 patch vendor-advisory
- imp-status-php3-css(8769) vdb-entry
- 5345 vdb-entry
- 4444 vdb-entry