NVD

Id
69787  
Name
CVE-2005-4189  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith H3 before 2.0.6 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Calendar name field when creating calendars, (2) event title field when deleting events, the (3) Category and (4) Location search fields, and the (5) attendees email address fields when editing event attendees, and possibly other vectors.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2005-12-13  
Modified Date
2011-03-07  
Seq
2005-4189  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
360634 69787 CVE-2005-4189 20051211 SEC Consult SA-20051211-0 :: Several XSS issues in Horde Framework, Kronolith Calendar, Mnemo Notes, Nag Tasks and Turba Addressbook  View
360635 69787 CVE-2005-4189 [horde-announce] 20051211 Kronolith H3 (2.0.6) (final)  View
360636 69787 CVE-2005-4189 DSA-970  View
360637 69787 CVE-2005-4189 http://www.sec-consult.com/245.html  View
360638 69787 CVE-2005-4189 15808  View
360639 69787 CVE-2005-4189 ADV-2005-2834  View

Related JVN