CVE-2005-1319 Cross-site scripting (XSS) vulnerability in Horde IMP Webmail client before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Horde IMP Webmail client before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| horde imp | <= 3.2.2 | No fix listed |
| horde imp | = 3.2.3 | No fix listed |
| horde imp | = 3.2.4 | No fix listed |
| horde imp | = 3.2.5 | No fix listed |
| horde imp | = 3.2.6 | No fix listed |
| horde imp | = 3.2.7 | No fix listed |
| horde imp | = 3.2.7_rc1 | No fix listed |
References
- cvs.horde.org
- [imp] 20050422 IMP 3.2.8 (final) mailing-list patch
- 15080 patch third-party-advisory