Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.52145
Category:FreeBSD Local Security Checks
Title:FreeBSD Ports: horde, horde-php5
Summary:NOSUMMARY
Description:Description:
The remote host is missing an update to the system
as announced in the referenced advisory.

The following packages are affected:
horde
horde-php5

CVE-2005-0961
Cross-site scripting (XSS) vulnerability in Horde 3.0.4 before
3.0.4-RC2 allows remote attackers to inject arbitrary web script or
HTML via the parent frame title.

Solution:
Update your system with the appropriate patches or
software upgrades.

http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.49&r2=1.515.2.93&ty=h
http://lists.horde.org/archives/announce/2005/000176.html
http://www.vuxml.org/freebsd/396ee517-a607-11d9-ac72-000bdb1444a4.html

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-Ref: BugTraq ID: 12943
Common Vulnerability Exposure (CVE) ID: CVE-2005-0961
http://secunia.com/advisories/14730
SuSE Security Announcement: SUSE-SR:2005:016 (Google Search)
http://www.novell.com/linux/security/advisories/2005_16_sr.html
CopyrightCopyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.