NVD

Id
14828  
Name
CVE-2010-3447  
Description
Cross-site scripting (XSS) vulnerability in view.php in the file viewer in Horde Gollem before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the file parameter in a view_file action.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2011-04-04  
Modified Date
2011-05-06  
Seq
2010-3447  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
82143 14828 CVE-2010-3447 http://bugs.horde.org/ticket/9191  View
82144 14828 CVE-2010-3447 http://git.horde.org/diff.php/gollem/view.php?rt=horde&r1=1.51.2.6&r2=1.51.2.7&ty=u  View
82145 14828 CVE-2010-3447 http://git.horde.org/diff.php/gollem/view.php?rt=horde-git&r1=7f7a4300f16b429ed645bc3e2af2cedffc70ce3e&r2=025a1bfbe69622036f8e3a27a6edd39c02dcd4ea  View
82146 14828 CVE-2010-3447 [announce] 20100928 Gollem H3 (1.1.2) (final)  View
82147 14828 CVE-2010-3447 [commits] 20100824 Horde branch master updated. 025a1bfbe69622036f8e3a27a6edd39c02dcd4ea  View
82148 14828 CVE-2010-3447 [oss-security] 20100929 CVE request: Horde Gollem <1.1.2 XSS in view.php  View
82149 14828 CVE-2010-3447 [oss-security] 20100930 Re: CVE request: Horde Gollem <1.1.2 XSS in view.php  View
82150 14828 CVE-2010-3447 [oss-security] 20100930 Re: CVE request: Horde Gollem <1.1.2 XSS in view.php  View
82151 14828 CVE-2010-3447 [oss-security] 20100930 Re: CVE request: Horde Gollem <1.1.2 XSS in view.php  View
82152 14828 CVE-2010-3447 ADV-2010-2523  View
82153 14828 CVE-2010-3447 gollem-view-xss(62091)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33634 JVNDB-2011-003876 Horde Gollem の view.php におけるクロスサイトスクリプティングの脆弱性 Horde Gollem の view.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-3447 46027 CVE-2010-3447 14828 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003876.html 2011-04-04 2012-03-27 View