CVE-2006-3548

Published: Jul 13, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote attackers to inject arbitrary web script or HTML via a (1) javascript URI or an external (2) http, (3) https, or (4) ftp URI in the url parameter in services/go.php (aka the dereferrer), (5) a javascript URI in the module parameter in services/help (aka the help viewer), and (6) the name parameter in services/problem.php (aka the problem reporting screen).

Affected (13)

Products: Horde: Horde

1 product

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Horde Horde	Version 3.0.1
Horde Horde	Version 3.0.2
Horde Horde	Version 3.0.3
Horde Horde	Version 3.0.4
Horde Horde	Version 3.0.4_rc1
Horde Horde	Version 3.0.4_rc2
Horde Horde	Version 3.0.6
Horde Horde	Version 3.0.7
Horde Horde	Version 3.0.8
Horde Horde	Version 3.0.9
Horde Horde	Version 3.0
Horde Horde	Version 3.1.1
Horde Horde	Version 3.1

References (30)

http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047687.html

Source: cve@mitre.org

http://lists.horde.org/archives/announce/2006/000287.html

Source: cve@mitre.org

Patch

http://lists.horde.org/archives/announce/2006/000288.html

Source: cve@mitre.org

Patch

http://moritz-naumann.com/adv/0011/hordemulti/0011.txt

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://secunia.com/advisories/20954

Source: cve@mitre.org

http://secunia.com/advisories/21459

Source: cve@mitre.org

http://secunia.com/advisories/27565

Source: cve@mitre.org

http://securityreason.com/securityalert/1229

Source: cve@mitre.org

http://securitytracker.com/id?1016442

Source: cve@mitre.org

ExploitPatch

http://www.debian.org/security/2007/dsa-1406

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2006_19_sr.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/439255/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18845

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2694

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27589

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047687.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.horde.org/archives/announce/2006/000287.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://lists.horde.org/archives/announce/2006/000288.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://moritz-naumann.com/adv/0011/hordemulti/0011.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://secunia.com/advisories/20954

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21459

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27565

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/1229

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016442

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://www.debian.org/security/2007/dsa-1406

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2006_19_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/439255/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/18845

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/2694

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/27589

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.