NVD

Id
15052  
Name
CVE-2010-3695  
Description
Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_save action, related to the Fetchmail configuration.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2011-03-31  
Modified Date
2011-09-21  
Seq
2010-3695  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
84104 15052 CVE-2010-3695 20100927 XSS in Horde IMP <=4.3.7, fetchmailprefs.php  View
84105 15052 CVE-2010-3695 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598584  View
84106 15052 CVE-2010-3695 http://cvs.horde.org/diff.php/imp/docs/CHANGES?rt=horde&r1=1.699.2.424&r2=1.699.2.430&ty=h  View
84107 15052 CVE-2010-3695 http://git.horde.org/diff.php/groupware/docs/webmail/CHANGES?rt=horde&r1=1.35.2.11&r2=1.35.2.13&ty=h  View
84108 15052 CVE-2010-3695 http://git.horde.org/diff.php/imp/fetchmailprefs.php?rt=horde&r1=1.39.4.10&r2=1.39.4.11  View
84109 15052 CVE-2010-3695 [announce] 20100928 IMP H3 (4.3.8) (final)  View
84110 15052 CVE-2010-3695 [announce] 20100928 Horde Groupware Webmail Edition 1.2.7 (final)  View
84111 15052 CVE-2010-3695 [oss-security] 20100930 Re: CVE request: Horde Gollem <1.1.2 XSS in view.php  View
84112 15052 CVE-2010-3695 [oss-security] 20100930 Re: CVE request: Horde Gollem <1.1.2 XSS in view.php  View
84113 15052 CVE-2010-3695 [oss-security] 20101001 Re: CVE request: Horde Gollem <1.1.2 XSS in view.php  View
84114 15052 CVE-2010-3695 8170  View
84115 15052 CVE-2010-3695 DSA-2204  View
84116 15052 CVE-2010-3695 20100927 XSS in Horde IMP <=4.3.7, fetchmailprefs.php  View
84117 15052 CVE-2010-3695 43515  View
84118 15052 CVE-2010-3695 ADV-2010-2513  View
84119 15052 CVE-2010-3695 ADV-2011-0769  View
84120 15052 CVE-2010-3695 https://bugzilla.redhat.com/show_bug.cgi?id=641069  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33638 JVNDB-2011-003880 Horde IMP および Horde Groupware Webmail Edition の fetchmailprefs.php におけるクロスサイトスクリプティングの脆弱性 Horde IMP および Horde Groupware Webmail Edition の fetchmailprefs.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-3695 46275 CVE-2010-3695 15052 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003880.html 2011-03-31 2012-03-27 View