NVD

Id
28856  
Name
CVE-2015-8807  
Description
Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers to inject arbitrary web script or HTML via vectors involving numeric form fields.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-04-13  
Modified Date
2016-05-18  
Seq
2015-8807  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
151997 28856 CVE-2015-8807 FEDORA-2016-3d1183830b  View
151998 28856 CVE-2015-8807 FEDORA-2016-5d0e7f15ef  View
151999 28856 CVE-2015-8807 [announce] 20160202 [announce] [SECURITY] Horde Groupware 5.2.12 (final)  View
152000 28856 CVE-2015-8807 [announce] 20160202 [announce] [SECURITY] Horde Groupware Webmail Edition 5.2.12 (final)  View
152001 28856 CVE-2015-8807 DSA-3496  View
152002 28856 CVE-2015-8807 [oss-security] 20160206 CVE Request: Horde: Two cross-site scripting vulnerabilities  View
152003 28856 CVE-2015-8807 [oss-security] 20160206 Re: CVE Request: Horde: Two cross-site scripting vulnerabilities  View
152004 28856 CVE-2015-8807 https://github.com/horde/horde/blob/e838d4c800b0d1ecaf8b4cc613fd3af4f994c79c/bundles/webmail/docs/CHANGES  View
152005 28856 CVE-2015-8807 https://github.com/horde/horde/commit/11d74fa5a22fe626c5e5a010b703cd46a136f253  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11759 JVNDB-2015-007079 Horde Groupware および Groupware Webmail Edition におけるクロスサイトスクリプティングの脆弱性 Horde Groupware および Groupware Webmail Edition の horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php の _renderVarInput_number 関数には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-8807 86032 CVE-2015-8807 28856 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007079.html 2015-12-14 2016-04-21 View