CVE-2005-4190

Published: Dec 13, 2005Modified: Apr 16, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework before 3.0.8 allow remote authenticated users to inject arbitrary web script or HTML via multiple vectors, as demonstrated by (1) the identity field, (2) Category and (3) Label search fields, (4) the Mobile Phone field, and (5) Date and (6) Time fields when importing CSV files, as exploited through modules such as (a) Turba Address Book, (b) Kronolith, (c) Mnemo, and (d) Nag.

Affected (43)

Products: Horde: Horde Application Framework

Horde

1 product

Horde Application Framework

Configuration A

43 vulnerable

Vulnerable Software	Affected Versions
Horde Horde Application Framework	Version 1.0.0
Horde Horde Application Framework	Version 1.0.10
Horde Horde Application Framework	Version 1.0.11
Horde Horde Application Framework	Version 1.0.2
Horde Horde Application Framework	Version 1.0.2_1
Horde Horde Application Framework	Version 1.0.3
Horde Horde Application Framework	Version 1.0.3_2
Horde Horde Application Framework	Version 1.0.3_3
Horde Horde Application Framework	Version 1.0.3_4
Horde Horde Application Framework	Version 1.0.4
Horde Horde Application Framework	Version 1.0.5
Horde Horde Application Framework	Version 1.0.6
Horde Horde Application Framework	Version 1.0.8
Horde Horde Application Framework	Version 1.0.9
Horde Horde Application Framework	Version 1.2.0
Horde Horde Application Framework	Version 1.2.1
Horde Horde Application Framework	Version 1.2.2
Horde Horde Application Framework	Version 1.2.3
Horde Horde Application Framework	Version 1.2.4
Horde Horde Application Framework	Version 1.2.5
Horde Horde Application Framework	Version 1.2.6
Horde Horde Application Framework	Version 1.2.7
Horde Horde Application Framework	Version 1.2.8
Horde Horde Application Framework	Version 1.3.3
Horde Horde Application Framework	Version 1.3.4
Horde Horde Application Framework	Version 2.0
Horde Horde Application Framework	Version 2.1
Horde Horde Application Framework	Version 2.2.1
Horde Horde Application Framework	Version 2.2.3
Horde Horde Application Framework	Version 2.2.4
Horde Horde Application Framework	Version 2.2.5
Horde Horde Application Framework	Version 2.2.6
Horde Horde Application Framework	Version 2.2.7
Horde Horde Application Framework	Version 2.2.8
Horde Horde Application Framework	Version 2.2.9
Horde Horde Application Framework	Version 2.2
Horde Horde Application Framework	Version 3.0.1
Horde Horde Application Framework	Version 3.0.2
Horde Horde Application Framework	Version 3.0.3
Horde Horde Application Framework	Version 3.0.4
Horde Horde Application Framework	Version 3.0.5
Horde Horde Application Framework	Version 3.0.6
Horde Horde Application Framework	Version 3.0.7