CVE-2005-4242

Published: Dec 14, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the address book and (2) contact data.

Affected (5)

Products: Horde: Turba H3

Horde

1 product

Turba H3

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Horde Turba H3	Up to 2.0.4
Horde Turba H3	Version 2.0.1
Horde Turba H3	Version 2.0.2
Horde Turba H3	Version 2.0.3
Horde Turba H3	Version 2.0

References (6)

http://lists.horde.org/archives/announce/2005/000235.html

Source: cve@mitre.org

http://secunia.com/advisories/17968

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2837

Source: cve@mitre.org

http://lists.horde.org/archives/announce/2005/000235.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17968

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2005/2837

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.