CVE

Id
24830  
CVE No.
CVE-2007-1473  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login page contains a language selection box, allows remote attackers to inject arbitrary web script or HTML via the new_lang parameter to login.php.  
Phase
Assigned (20070316)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
245971 24830 CVE-2007-1473 BUGTRAQ:20070315 Horde 3.1.4 (RC1) fixes XSS issue  View
245972 24830 CVE-2007-1473 URL:http://www.securityfocus.com/archive/1/archive/1/462915/100/0/threaded  View
245973 24830 CVE-2007-1473 MLIST:[announce] 20070314 Horde 3.1.4 (final)  View
245974 24830 CVE-2007-1473 URL:http://lists.horde.org/archives/announce/2007/000315.html  View
245975 24830 CVE-2007-1473 DEBIAN:DSA-1406  View
245976 24830 CVE-2007-1473 URL:http://www.debian.org/security/2007/dsa-1406  View
245977 24830 CVE-2007-1473 SUSE:SUSE-SR:2007:007  View
245978 24830 CVE-2007-1473 URL:http://www.novell.com/linux/security/advisories/2007_007_suse.html  View
245979 24830 CVE-2007-1473 BID:22984  View
245980 24830 CVE-2007-1473 URL:http://www.securityfocus.com/bid/22984  View
245981 24830 CVE-2007-1473 VUPEN:ADV-2007-0965  View
245982 24830 CVE-2007-1473 URL:http://www.vupen.com/english/advisories/2007/0965  View
245983 24830 CVE-2007-1473 OSVDB:33084  View
245984 24830 CVE-2007-1473 URL:http://www.osvdb.org/33084  View
245985 24830 CVE-2007-1473 SECTRACK:1017775  View
245986 24830 CVE-2007-1473 URL:http://securitytracker.com/id?1017775  View
245987 24830 CVE-2007-1473 SECUNIA:24528  View
245988 24830 CVE-2007-1473 URL:http://secunia.com/advisories/24528  View
245989 24830 CVE-2007-1473 SECUNIA:24995  View
245990 24830 CVE-2007-1473 URL:http://secunia.com/advisories/24995  View
245991 24830 CVE-2007-1473 SECUNIA:27565  View
245992 24830 CVE-2007-1473 URL:http://secunia.com/advisories/27565  View
245993 24830 CVE-2007-1473 SREASON:2427  View
245994 24830 CVE-2007-1473 URL:http://securityreason.com/securityalert/2427  View
245995 24830 CVE-2007-1473 XF:horde-login-xss(33013)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54828 JVNDB-2007-003520 PHP の interbase エクステンションにおけるバッファオーバーフローの脆弱性 PHP の interbase エクステンションの (1) ibase_connect および (2) ibase_pconnect 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2007-1475 24830 5.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003520.html  View