QwikSec

Security Database

CVE

CWE

Training

CVE-2008-5917

Published: Jan 21, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the XSS filter (framework/Text_Filter/Filter/xss.php) in Horde Application Framework 3.2.2 and 3.3, when Internet Explorer is being used, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to style attributes.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

SUSE-SR:2009:007

vendor-advisory

x_refsource_SUSE

third-party-advisory

x_refsource_SECUNIA

http://cvs.horde.org/diff.php/framework/Text_Filter/Filter/xss.php?r1=1.17&r2=1.18

x_refsource_CONFIRM

[announce] Horde 3.2.3 (final)

mailing-list

x_refsource_MLIST

third-party-advisory

x_refsource_SECUNIA

[announce] Horde 3.3.1 (final)

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.