Vulnerability Database

296,760

Total vulnerabilities in the database

CVE-2005-4242

Multiple cross-site scripting (XSS) vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the address book and (2) contact data.

Published: Dec 14, 2005
Updated: Apr 13, 2023
CVE: CVE-2005-4242
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
horde / turba_h3	2.0.2	2.0.2.x
horde / turba_h3	2.0.1	2.0.1.x
horde / turba_h3	2.0	2.0.x
horde / turba_h3	-	2.0.4.x
horde / turba_h3	2.0.3	2.0.3.x

http://lists.horde.org/archives/announce/2005/000235.html
http://secunia.com/advisories/17968
http://www.vupen.com/english/advisories/2005/2837

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo