NVD

Id
62895  
Name
CVE-2006-4256  
Description
index.php in Horde Application Framework before 3.1.2 allows remote attackers to include web pages from other sites, which could be useful for phishing attacks, via a URL in the url parameter, aka "cross-site referencing." NOTE: some sources have referred to this issue as XSS, but it is different than classic XSS.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-08-21  
Modified Date
2011-03-07  
Seq
2006-4256  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
327061 62895 CVE-2006-4256 [horde-announce] 20060817 Horde 3.1.3 (final)  View
327062 62895 CVE-2006-4256 1422  View
327063 62895 CVE-2006-4256 1016713  View
327064 62895 CVE-2006-4256 DSA-1406  View
327065 62895 CVE-2006-4256 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2456  View
327066 62895 CVE-2006-4256 20060816 [scip_Advisory 2456] Horde Framework and Horde IMP /index.php cross site referencing  View
327067 62895 CVE-2006-4256 ADV-2006-3309  View
327068 62895 CVE-2006-4256 horde-index-xss(28411)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59708 JVNDB-2006-001974 Horde Application Framework における他のサイトから Web ページをインクルードされる脆弱性 Horde Application Framework の index.php は、フィッシング攻撃に有効な他のサイトから Web ページをインクルードされる脆弱性が存在します。 CVE-2006-4256 20358 CVE-2006-4256 62895 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001974.html 2006-08-21 2012-09-25 View