CVE-2010-3695 Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HT...
MediumCVSS 4.3
EPSS 5.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_save action, related to the Fetchmail configuration.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| horde imp | <= 4.3.7 | No fix listed |
| horde imp | = 2.0 | No fix listed |
| horde imp | = 2.2 | No fix listed |
| horde imp | = 2.2.1 | No fix listed |
| horde imp | = 2.2.2 | No fix listed |
| horde imp | = 2.2.3 | No fix listed |
| horde imp | = 2.2.4 | No fix listed |
| horde imp | = 2.2.5 | No fix listed |
| horde imp | = 2.2.6 | No fix listed |
| horde imp | = 2.2.7 | No fix listed |
| horde imp | = 2.2.8 | No fix listed |
| horde imp | = 2.3 | No fix listed |
| horde imp | = 3.0 | No fix listed |
| horde imp | = 3.1 | No fix listed |
| horde imp | = 3.1.2 | No fix listed |
| horde imp | = 3.2 | No fix listed |
| horde imp | = 3.2.1 | No fix listed |
| horde imp | = 3.2.2 | No fix listed |
| horde imp | = 3.2.3 | No fix listed |
| horde imp | = 3.2.4 | No fix listed |
| horde imp | = 3.2.5 | No fix listed |
| horde imp | = 3.2.6 | No fix listed |
| horde imp | = 3.2.7 | No fix listed |
| horde imp | = 3.2.7-rc1 | No fix listed |
| horde imp | = 4.0 | No fix listed |
Show 48 more
| Product | Affected versions | Fixed in |
|---|---|---|
| horde imp | = 4.0.1 | No fix listed |
| horde imp | = 4.0.2 | No fix listed |
| horde imp | = 4.0.3 | No fix listed |
| horde imp | = 4.0.4 | No fix listed |
| horde imp | = 4.1.3 | No fix listed |
| horde imp | = 4.1.5 | No fix listed |
| horde imp | = 4.1.6 | No fix listed |
| horde imp | = 4.2 | No fix listed |
| horde imp | = 4.2.1 | No fix listed |
| horde imp | = 4.2.2 | No fix listed |
| horde imp | = 4.3 | No fix listed |
| horde imp | = 4.3.1 | No fix listed |
| horde imp | = 4.3.2 | No fix listed |
| horde imp | = 4.3.3 | No fix listed |
| horde imp | = 4.3.4 | No fix listed |
| horde imp | = 4.3.5 | No fix listed |
| horde imp | = 4.3.6 | No fix listed |
| horde groupware | <= 1.2.6 | No fix listed |
| horde groupware | = 1.0 | No fix listed |
| horde groupware | = 1.0-rc1 | No fix listed |
| horde groupware | = 1.0-rc2 | No fix listed |
| horde groupware | = 1.0.1 | No fix listed |
| horde groupware | = 1.0.2 | No fix listed |
| horde groupware | = 1.0.3 | No fix listed |
| horde groupware | = 1.0.4 | No fix listed |
| horde groupware | = 1.0.5 | No fix listed |
| horde groupware | = 1.0.6 | No fix listed |
| horde groupware | = 1.0.7 | No fix listed |
| horde groupware | = 1.0.8 | No fix listed |
| horde groupware | = 1.1 | No fix listed |
| horde groupware | = 1.1-rc1 | No fix listed |
| horde groupware | = 1.1-rc2 | No fix listed |
| horde groupware | = 1.1-rc3 | No fix listed |
| horde groupware | = 1.1-rc4 | No fix listed |
| horde groupware | = 1.1.1 | No fix listed |
| horde groupware | = 1.1.2 | No fix listed |
| horde groupware | = 1.1.3 | No fix listed |
| horde groupware | = 1.1.4 | No fix listed |
| horde groupware | = 1.1.5 | No fix listed |
| horde groupware | = 1.1.6 | No fix listed |
| horde groupware | = 1.2 | No fix listed |
| horde groupware | = 1.2-rc1 | No fix listed |
| horde groupware | = 1.2.1 | No fix listed |
| horde groupware | = 1.2.2 | No fix listed |
| horde groupware | = 1.2.3 | No fix listed |
| horde groupware | = 1.2.3-rc1 | No fix listed |
| horde groupware | = 1.2.4 | No fix listed |
| horde groupware | = 1.2.5 | No fix listed |
References
- 20100927 XSS in Horde IMP <=4.3.7, fetchmailprefs.php exploit mailing-list
- bugs.debian.org exploit patch
- cvs.horde.org
- git.horde.org
- git.horde.org patch
- [announce] 20100928 IMP H3 (4.3.8) (final) mailing-list patch
- [announce] 20100928 Horde Groupware Webmail Edition 1.2.7 (final) mailing-list
- [oss-security] 20100930 Re: CVE request: Horde Gollem <1.1.2 XSS in view.php exploit mailing-list patch
- [oss-security] 20100930 Re: CVE request: Horde Gollem <1.1.2 XSS in view.php exploit mailing-list patch
- [oss-security] 20101001 Re: CVE request: Horde Gollem <1.1.2 XSS in view.php mailing-list patch
- 41627 third-party-advisory vendor-advisory
- 43896 third-party-advisory vendor-advisory
- 8170 third-party-advisory
- DSA-2204 vendor-advisory
- 20100927 XSS in Horde IMP <=4.3.7, fetchmailprefs.php mailing-list
- 43515 exploit vdb-entry
- ADV-2010-2513 vdb-entry vendor-advisory
- ADV-2011-0769 vdb-entry vendor-advisory
- bugzilla.redhat.com exploit patch