CVE

Id
54034  
CVE No.
CVE-2012-0791  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) composeCache, (2) rtemode, or (3) filename_* parameters to the compose page; (4) formname parameter to the contacts popup window; or (5) IMAP mailbox names. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20120119)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
568427 54034 CVE-2012-0791 MLIST:[oss-security] 20120121 Re: Re: CVE Request -- Horde IMP -- Multiple XSS flaws  View
568428 54034 CVE-2012-0791 URL:http://www.openwall.com/lists/oss-security/2012/01/22/2  View
568429 54034 CVE-2012-0791 CONFIRM:http://www.horde.org/apps/imp/docs/CHANGES  View
568430 54034 CVE-2012-0791 CONFIRM:http://www.horde.org/apps/imp/docs/RELEASE_NOTES  View
568431 54034 CVE-2012-0791 CONFIRM:http://www.horde.org/apps/webmail/docs/CHANGES  View
568432 54034 CVE-2012-0791 CONFIRM:http://www.horde.org/apps/webmail/docs/RELEASE_NOTES  View
568433 54034 CVE-2012-0791 BID:51586  View
568434 54034 CVE-2012-0791 URL:http://www.securityfocus.com/bid/51586  View
568435 54034 CVE-2012-0791 SECTRACK:1026553  View
568436 54034 CVE-2012-0791 URL:http://www.securitytracker.com/id?1026553  View
568437 54034 CVE-2012-0791 SECTRACK:1026554  View
568438 54034 CVE-2012-0791 URL:http://www.securitytracker.com/id?1026554  View
568439 54034 CVE-2012-0791 SECUNIA:47580  View
568440 54034 CVE-2012-0791 URL:http://secunia.com/advisories/47580  View
568441 54034 CVE-2012-0791 SECUNIA:47592  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27406 JVNDB-2012-003113 Moodle およびその他の製品で使用される PHPMailer library における任意の電子メールヘッダーを挿入される脆弱性 Moodle およびその他の製品使用される PHPMailer library の class.phpmailer.php には、任意の電子メールヘッダーを挿入される脆弱性が存在します。 CVE-2012-0796 54034 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003113.html  View