CVEvulnerability
CVE-2008-4182
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-09-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in imp/test.php in Horde Turba Contact Manager H3 2.2.1 and other versions before 2.3.1, and possibly other Horde Project products, allows remote attackers to inject arbitrary web script or HTML via the User field in an IMAP session.
Affected configurations
• horde turba contact manager h3 2.2.1
• horde turba contact manager h3 3.1.1
• horde turba contact manager h3 3.2.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://lists.horde.org/archives/announce/2008/000465.html lists.horde.org
- http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html lists.opensuse.org
- http://packetstormsecurity.org/0809-exploits/turba-xss.txt packetstormsecurity.org
- http://secunia.com/advisories/34703 secunia.com
- http://www.debian.org/security/2009/dsa-1770 www.debian.org
- http://www.securityfocus.com/bid/31168 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45131 exchange.xforce.ibmcloud.com
- http://lists.horde.org/archives/announce/2008/000465.html lists.horde.org
- http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html lists.opensuse.org
- http://packetstormsecurity.org/0809-exploits/turba-xss.txt packetstormsecurity.org
- http://secunia.com/advisories/34703 secunia.com
- http://www.debian.org/security/2009/dsa-1770 www.debian.org
- http://www.securityfocus.com/bid/31168 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45131 exchange.xforce.ibmcloud.com