NVD

Id
48242  
Name
CVE-2009-0930  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 4.2.2 and 4.3.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) smime.php, (2) pgp.php, and (3) message.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-03-17  
Modified Date
2009-04-16  
Seq
2009-0930  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
242522 48242 CVE-2009-0930 http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.301.2.3  View
242523 48242 CVE-2009-0930 http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.375  View
242524 48242 CVE-2009-0930 [announce] 20090127 IMP 4.2.2 (final)  View
242525 48242 CVE-2009-0930 [announce] 20090127 IMP 4.3.3 (final)  View
242526 48242 CVE-2009-0930 SUSE-SR:2009:007  View
242527 48242 CVE-2009-0930 DSA-1770  View
242528 48242 CVE-2009-0930 33492  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40445 JVNDB-2009-001451 Horde IMP における複数のクロスサイトスクリプティングの脆弱性 Horde IMP には、複数のクロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-0930 38361 CVE-2009-0930 48242 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001451.html 2009-03-17 2009-06-30 View