Total vulnerabilities in the database
Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote attackers to inject arbitrary web script or HTML via a (1) javascript URI or an external (2) http, (3) https, or (4) ftp URI in the url parameter in services/go.php (aka the dereferrer), (5) a javascript URI in the module parameter in services/help (aka the help viewer), and (6) the name parameter in services/problem.php (aka the problem reporting screen).
| Software | From | Fixed in |
|---|---|---|
| horde / horde | 3.0.6 | 3.0.6.x |
| horde / horde | 3.0 | 3.0.x |
| horde / horde | 3.0.3 | 3.0.3.x |
| horde / horde | 3.1.1 | 3.1.1.x |
| horde / horde | 3.0.4 | 3.0.4.x |
| horde / horde | 3.1 | 3.1.x |
| horde / horde | 3.0.1 | 3.0.1.x |
| horde / horde | 3.0.4_rc2 | 3.0.4_rc2.x |
| horde / horde | 3.0.8 | 3.0.8.x |
| horde / horde | 3.0.9 | 3.0.9.x |
| horde / horde | 3.0.2 | 3.0.2.x |
| horde / horde | 3.0.4_rc1 | 3.0.4_rc1.x |
| horde / horde | 3.0.7 | 3.0.7.x |