NVD

Id
62894  
Name
CVE-2006-4255  
Description
Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors related to folder names, as injected into the vfolder_label form field in the IMP search screen.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-08-21  
Modified Date
2011-03-07  
Seq
2006-4255  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
327053 62894 CVE-2006-4255 [horde-announce] 20060817 IMP H3 (4.1.3) (final)  View
327054 62894 CVE-2006-4255 1423  View
327055 62894 CVE-2006-4255 1016713  View
327056 62894 CVE-2006-4255 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2457  View
327057 62894 CVE-2006-4255 20060816 [scip_Advisory 2457] Horde Framework and Horde IMP /horde/imp/search.php cross site scripting  View
327058 62894 CVE-2006-4255 19544  View
327059 62894 CVE-2006-4255 ADV-2006-3316  View
327060 62894 CVE-2006-4255 horde-search-xss(28409)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59707 JVNDB-2006-001973 Horde IMP H3 の horde/imp/search.php におけるクロスサイトスクリプティングの脆弱性 Horde IMP H3 の horde/imp/search.php は、vfolder_label フォームに挿入されるようなフォルダ名に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-4255 20357 CVE-2006-4255 62894 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001973.html 2006-08-21 2012-09-25 View