Description
Cross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML via the subdir parameter.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2278-1 | horde3 security update |
EUVD |
EUVD-2010-3079 | Cross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML via the subdir parameter. |
References
History
No history.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-07T02:55:46.720Z
Reserved: 2010-08-20T00:00:00.000Z
Link: CVE-2010-3077
No data.
Status : Deferred
Published: 2010-11-09T21:00:04.117
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-3077
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD