CVE-2012-0791 Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1...
MediumCVSS 4.3
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) composeCache, (2) rtemode, or (3) filename_* parameters to the compose page; (4) formname parameter to the contacts popup window; or (5) IMAP mailbox names. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| horde dynamic imp | <= 5.0.17 | No fix listed |
| horde dynamic imp | = 1.0 | No fix listed |
| horde dynamic imp | = 1.0-alpha | No fix listed |
| horde dynamic imp | = 1.0-rc1 | No fix listed |
| horde dynamic imp | = 1.0-rc2 | No fix listed |
| horde dynamic imp | = 1.0-rc3 | No fix listed |
| horde dynamic imp | = 1.1 | No fix listed |
| horde dynamic imp | = 1.1-rc1 | No fix listed |
| horde dynamic imp | = 1.1-rc2 | No fix listed |
| horde dynamic imp | = 1.1.1 | No fix listed |
| horde dynamic imp | = 1.1.2 | No fix listed |
| horde dynamic imp | = 1.1.3 | No fix listed |
| horde dynamic imp | = 1.1.4 | No fix listed |
| horde dynamic imp | = 1.1.5 | No fix listed |
| horde dynamic imp | = 1.1.6 | No fix listed |
| horde dynamic imp | = 5.0 | No fix listed |
| horde dynamic imp | = 5.0.1 | No fix listed |
| horde dynamic imp | = 5.0.2 | No fix listed |
| horde dynamic imp | = 5.0.3 | No fix listed |
| horde dynamic imp | = 5.0.4 | No fix listed |
| horde dynamic imp | = 5.0.5 | No fix listed |
| horde dynamic imp | = 5.0.6 | No fix listed |
| horde dynamic imp | = 5.0.7 | No fix listed |
| horde dynamic imp | = 5.0.8 | No fix listed |
| horde dynamic imp | = 5.0.9 | No fix listed |
Show 103 more
| Product | Affected versions | Fixed in |
|---|---|---|
| horde dynamic imp | = 5.0.10 | No fix listed |
| horde dynamic imp | = 5.0.11 | No fix listed |
| horde dynamic imp | = 5.0.12 | No fix listed |
| horde dynamic imp | = 5.0.13 | No fix listed |
| horde dynamic imp | = 5.0.14 | No fix listed |
| horde dynamic imp | = 5.0.15 | No fix listed |
| horde dynamic imp | = 5.0.16 | No fix listed |
| horde imp | = 2.0 | No fix listed |
| horde imp | = 2.2 | No fix listed |
| horde imp | = 2.2.1 | No fix listed |
| horde imp | = 2.2.2 | No fix listed |
| horde imp | = 2.2.3 | No fix listed |
| horde imp | = 2.2.4 | No fix listed |
| horde imp | = 2.2.5 | No fix listed |
| horde imp | = 2.2.6 | No fix listed |
| horde imp | = 2.2.7 | No fix listed |
| horde imp | = 2.2.8 | No fix listed |
| horde imp | = 2.3 | No fix listed |
| horde imp | = 3.0 | No fix listed |
| horde imp | = 3.1 | No fix listed |
| horde imp | = 3.1.2 | No fix listed |
| horde imp | = 3.2 | No fix listed |
| horde imp | = 3.2.1 | No fix listed |
| horde imp | = 3.2.2 | No fix listed |
| horde imp | = 3.2.3 | No fix listed |
| horde imp | = 3.2.4 | No fix listed |
| horde imp | = 3.2.5 | No fix listed |
| horde imp | = 3.2.6 | No fix listed |
| horde imp | = 3.2.7 | No fix listed |
| horde imp | = 3.2.7-rc1 | No fix listed |
| horde imp | = 4.0 | No fix listed |
| horde imp | = 4.0.1 | No fix listed |
| horde imp | = 4.0.2 | No fix listed |
| horde imp | = 4.0.3 | No fix listed |
| horde imp | = 4.0.4 | No fix listed |
| horde imp | = 4.1.3 | No fix listed |
| horde imp | = 4.1.5 | No fix listed |
| horde imp | = 4.1.6 | No fix listed |
| horde imp | = 4.2 | No fix listed |
| horde imp | = 4.2.1 | No fix listed |
| horde imp | = 4.2.2 | No fix listed |
| horde imp | = 4.3 | No fix listed |
| horde imp | = 4.3.1 | No fix listed |
| horde imp | = 4.3.2 | No fix listed |
| horde imp | = 4.3.3 | No fix listed |
| horde imp | = 4.3.4 | No fix listed |
| horde imp | = 4.3.5 | No fix listed |
| horde imp | = 4.3.6 | No fix listed |
| horde imp | = 4.3.7 | No fix listed |
| horde imp | = 4.3.8 | No fix listed |
| horde imp | = 4.3.9 | No fix listed |
| horde imp | = 5.0 | No fix listed |
| horde imp | = 5.0-alpha1 | No fix listed |
| horde imp | = 5.0-beta1 | No fix listed |
| horde imp | = 5.0-rc1 | No fix listed |
| horde imp | = 5.0-rc2 | No fix listed |
| horde imp | = 5.0.1 | No fix listed |
| horde imp | = 5.0.2 | No fix listed |
| horde imp | = 5.0.3 | No fix listed |
| horde imp | = 5.0.4-git | No fix listed |
| horde groupware webmail edition | <= 4.0.5 | No fix listed |
| horde groupware webmail edition | = 1.0 | No fix listed |
| horde groupware webmail edition | = 1.0-rc1 | No fix listed |
| horde groupware webmail edition | = 1.0-rc2 | No fix listed |
| horde groupware webmail edition | = 1.0.1 | No fix listed |
| horde groupware webmail edition | = 1.0.2 | No fix listed |
| horde groupware webmail edition | = 1.0.3 | No fix listed |
| horde groupware webmail edition | = 1.0.4 | No fix listed |
| horde groupware webmail edition | = 1.0.5 | No fix listed |
| horde groupware webmail edition | = 1.0.6 | No fix listed |
| horde groupware webmail edition | = 1.0.7 | No fix listed |
| horde groupware webmail edition | = 1.0.8 | No fix listed |
| horde groupware webmail edition | = 1.1 | No fix listed |
| horde groupware webmail edition | = 1.1-rc1 | No fix listed |
| horde groupware webmail edition | = 1.1-rc2 | No fix listed |
| horde groupware webmail edition | = 1.1-rc3 | No fix listed |
| horde groupware webmail edition | = 1.1-rc4 | No fix listed |
| horde groupware webmail edition | = 1.1.1 | No fix listed |
| horde groupware webmail edition | = 1.1.2 | No fix listed |
| horde groupware webmail edition | = 1.1.3 | No fix listed |
| horde groupware webmail edition | = 1.1.4 | No fix listed |
| horde groupware webmail edition | = 1.1.5 | No fix listed |
| horde groupware webmail edition | = 1.1.6 | No fix listed |
| horde groupware webmail edition | = 1.2 | No fix listed |
| horde groupware webmail edition | = 1.2-rc1 | No fix listed |
| horde groupware webmail edition | = 1.2.1 | No fix listed |
| horde groupware webmail edition | = 1.2.2 | No fix listed |
| horde groupware webmail edition | = 1.2.3 | No fix listed |
| horde groupware webmail edition | = 1.2.3-rc1 | No fix listed |
| horde groupware webmail edition | = 1.2.4 | No fix listed |
| horde groupware webmail edition | = 1.2.5 | No fix listed |
| horde groupware webmail edition | = 1.2.6 | No fix listed |
| horde groupware webmail edition | = 1.2.7 | No fix listed |
| horde groupware webmail edition | = 1.2.8 | No fix listed |
| horde groupware webmail edition | = 1.2.9 | No fix listed |
| horde groupware webmail edition | = 1.2.10 | No fix listed |
| horde groupware webmail edition | = 4.0 | No fix listed |
| horde groupware webmail edition | = 4.0-rc1 | No fix listed |
| horde groupware webmail edition | = 4.0-rc2 | No fix listed |
| horde groupware webmail edition | = 4.0.1 | No fix listed |
| horde groupware webmail edition | = 4.0.2 | No fix listed |
| horde groupware webmail edition | = 4.0.3 | No fix listed |
| horde groupware webmail edition | = 4.0.4 | No fix listed |
References
- 47580 third-party-advisory vendor-advisory
- 47592 third-party-advisory vendor-advisory
- DSA-2485 vendor-advisory
- www.horde.org
- www.horde.org
- www.horde.org
- www.horde.org
- [oss-security] 20120121 Re: Re: CVE Request -- Horde IMP -- Multiple XSS flaws mailing-list
- 51586 vdb-entry
- 1026553 vdb-entry
- 1026554 vdb-entry