QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-3548

Back to search

CVE-2006-3548

Published: Jul 13, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote attackers to inject arbitrary web script or HTML via a (1) javascript URI or an external (2) http, (3) https, or (4) ftp URI in the url parameter in services/go.php (aka the dereferrer), (5) a javascript URI in the module parameter in services/help (aka the help viewer), and (6) the name parameter in services/problem.php (aka the problem reporting screen).

VendorProductVersions

n/a

n/a

affected
n/a

References

18845
vdb-entry
x_refsource_BID
ADV-2006-2694
vdb-entry
x_refsource_VUPEN
21459
third-party-advisory
x_refsource_SECUNIA
SUSE-SR:2006:019
vendor-advisory
x_refsource_SUSE
27565
third-party-advisory
x_refsource_SECUNIA
1016442
vdb-entry
x_refsource_SECTRACK
1229
third-party-advisory
x_refsource_SREASON
DSA-1406
vendor-advisory
x_refsource_DEBIAN
20954
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now