{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allow remote attackers to inject arbitrary web script or HTML via the (1) username (aka fmusername), (2) password (aka fmpassword), or (3) server (aka fmserver) field in a fetchmail_prefs_save action, related to the Fetchmail configuration, a different issue than CVE-2010-3695.  NOTE: some of these details are obtained from third party information."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2011-04-01T21:00:00Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://git.horde.org/diff.php/imp/fetchmailprefs.php?rt=horde&r1=1.39.4.10&r2=1.39.4.11"}, {"name": "ADV-2010-2513", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2010/2513"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2010-4778", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allow remote attackers to inject arbitrary web script or HTML via the (1) username (aka fmusername), (2) password (aka fmpassword), or (3) server (aka fmserver) field in a fetchmail_prefs_save action, related to the Fetchmail configuration, a different issue than CVE-2010-3695.  NOTE: some of these details are obtained from third party information."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://git.horde.org/diff.php/imp/fetchmailprefs.php?rt=horde&r1=1.39.4.10&r2=1.39.4.11", "refsource": "CONFIRM", "url": "http://git.horde.org/diff.php/imp/fetchmailprefs.php?rt=horde&r1=1.39.4.10&r2=1.39.4.11"}, {"name": "ADV-2010-2513", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2010/2513"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T03:55:35.100Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://git.horde.org/diff.php/imp/fetchmailprefs.php?rt=horde&r1=1.39.4.10&r2=1.39.4.11"}, {"name": "ADV-2010-2513", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2010/2513"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2010-4778", "datePublished": "2011-04-01T21:00:00Z", "dateReserved": "2011-04-01T00:00:00Z", "dateUpdated": "2024-09-17T03:12:55.114Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:horde:imp:*:*:*:*:*:*:*:*", "matchCriteriaId": "313CF637-CA8F-4AC0-BE3D-9D7B4125D81E", "versionEndIncluding": "4.3.7", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "8D2A8C5B-6155-4B40-B8C8-B4944064E3DF", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:2.2:*:*:*:*:*:*:*", "matchCriteriaId": "D11E08A4-79D6-46FE-880F-66E9778C298E", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:2.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "55A3894F-2E3F-49CA-BEE5-759D603F6EAD", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:2.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "FDDBDC41-7E6F-4C97-95BD-7DEB2D9FE837", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:2.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "3B52D447-8E56-4E04-9650-38D222DA8D2C", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:2.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "1C455353-0401-4975-89BC-C23D32A684F0", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:2.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "C1D9D9E1-D8B7-4A56-BC2F-90BDC97322B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:2.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "59DE856E-98FF-4B49-BD7F-3E326FEB89EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:2.2.7:*:*:*:*:*:*:*", "matchCriteriaId": "6ED34889-9F98-46BC-9176-557484272C05", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:2.2.8:*:*:*:*:*:*:*", "matchCriteriaId": "B7FBC61D-6A08-4DE8-A5E5-A3FC57E7759D", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:2.3:*:*:*:*:*:*:*", "matchCriteriaId": "E52AEEE6-2364-4CFB-9337-C5CCA54362E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:3.0:*:*:*:*:*:*:*", "matchCriteriaId": "AD137160-B80D-4C65-A9A9-CEE12107E3DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:3.1:*:*:*:*:*:*:*", "matchCriteriaId": "4E6C2AC8-C21A-4152-AAE6-915ACE65CB5C", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:3.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "1956C8F0-EB91-4322-85C1-6BE15AA13703", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:3.2:*:*:*:*:*:*:*", "matchCriteriaId": "A48DEBEB-0C2D-4F6A-AF63-04990D2FD5AE", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:3.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "8E004FA4-0180-458A-8E8C-8167EF684ED8", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:3.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "1F0A1617-17D1-4C9F-A818-27321FD2FEAE", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:3.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "D86CDC19-43C3-4ACC-94B4-388BCC8A2203", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:3.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "E9931A5B-CD0C-43A3-B32D-915FF4AF57D5", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:3.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "FDC69F98-A3B4-4573-AFE4-2069218B3454", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:3.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "AD4D0137-3515-4857-8E70-4600CD2D4278", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:3.2.7:*:*:*:*:*:*:*", "matchCriteriaId": "A59756D1-3401-4B15-8B68-AA68B5BC3223", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:3.2.7:rc1:*:*:*:*:*:*", "matchCriteriaId": "73FD31BC-651B-461F-B9F4-6CA8D5CCE583", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.0:*:*:*:*:*:*:*", "matchCriteriaId": "184592A5-4108-40DB-8882-9D2468490DE9", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "28470602-E3F1-4F04-B012-F91AB95E7A68", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "6B584932-BFB2-4462-BC69-B9FCC059F59F", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "702F7A33-CF9E-4966-B622-E4BD27B120AB", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "FF1BB456-5462-4ACE-AECF-730B1C7BE2CD", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "1D23A341-217D-4AF2-AC61-DFC9761AFE3E", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "C129AAEE-5388-4D81-AC1F-570EFF27EF89", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "01CBF0CE-7133-4281-842C-3584AE13F36D", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.2:*:*:*:*:*:*:*", "matchCriteriaId": "373263B9-D967-4A9B-A062-FC841061E143", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "05FAFC4C-8E72-4EA5-930F-6F76CCD0138A", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "F91A26C3-D538-4935-90FF-DDD5E8733968", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.3:*:*:*:*:*:*:*", "matchCriteriaId": "1F9064E7-6081-4B23-BC03-21E6F483FA53", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "3E60BFE2-B3E4-416F-9697-58D912907E86", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "B4C5D659-E2C1-444D-8B5C-28970D830F1D", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "72D702C7-2789-4837-BC74-59570B13B4C2", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.3.4:*:*:*:*:*:*:*", "matchCriteriaId": "1A363643-3EF2-4F05-A934-0187AF846D51", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.3.5:*:*:*:*:*:*:*", "matchCriteriaId": "4611791C-DA55-4F37-9030-1BEA17D0D817", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:imp:4.3.6:*:*:*:*:*:*:*", "matchCriteriaId": "2C5EC486-EF14-43DF-9152-69456E0FE271", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:horde:groupware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D82E23DB-0652-4BA9-9D9A-0107BEC1EA31", "versionEndIncluding": "1.2.6", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "71C2653B-7F0B-4628-9E77-44744BC05463", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "E55009DF-EDF1-4FAE-88E7-1CF33BFFEBC7", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "980162BB-48B3-4921-987A-6D18C62965A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "DC241F01-B9DF-4D0E-BA3C-3523AEEB6BCF", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "B574D428-0A3A-47CA-A926-5C936F83919A", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "D59C23FB-E223-4EED-8F69-3CC1EE7DF148", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "904EEFF0-CF66-43E6-BAA9-1A6FB4115CB3", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "B3AB0176-9CB3-4D49-B644-2C413C9B6E13", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "C95E9B57-2DB0-4692-A7D1-180EC3687D1B", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "6E7D8683-8DD4-4EB0-A28F-0C556304BB2D", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "9F68E5D5-7812-4FB2-ACF9-76180B038D80", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.1:*:*:*:*:*:*:*", "matchCriteriaId": "C6BBB036-494E-41D4-BD04-40906FAB5C60", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "37B76B27-ADF0-4E88-B92C-304FB38A356E", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "965F245A-879A-4DF0-ABC5-588E78C4CBBD", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.1:rc3:*:*:*:*:*:*", "matchCriteriaId": "3DCB29F9-3875-4264-8117-5751FEDC3350", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.1:rc4:*:*:*:*:*:*", "matchCriteriaId": "59FC250F-EF0B-4604-99A2-3EEB8B2DEB77", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "1C10E681-5D2B-4EA4-B8E1-C0CA4FC9D3FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "19CC5154-42C5-4877-9147-5DFD61BD5CDC", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "62AAEBBF-1696-4EAC-8837-68A03C2D2F5F", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "F626876D-99FC-4DE0-BEE0-35874C4E25F7", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "A849DD3E-882A-4621-BB6C-315A76677BB9", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "AAF1A6AE-0748-476B-ACE2-DA43A9443B7C", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.2:*:*:*:*:*:*:*", "matchCriteriaId": "AB711B5E-9011-4BA2-917A-DB8545705E23", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.2:rc1:*:*:*:*:*:*", "matchCriteriaId": "50DC1068-F426-497F-A5A0-E032BC3816F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "F2C5A176-8C72-40EA-85AC-F11B40FD53A3", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "CB4C3487-4556-47E5-8BF3-1DEDF0E9AFEC", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "78F24E43-491B-4AD1-B905-66F7FC6DA98D", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.2.3:rc1:*:*:*:*:*:*", "matchCriteriaId": "F577A169-8354-4218-B3C6-04DA4BDF1E3C", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "1FAFD66F-81F7-48F9-87F0-E394F55A1288", "vulnerable": true}, {"criteria": "cpe:2.3:a:horde:groupware:1.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "2BA91C75-69CF-45AE-AF23-ADE9259B7C9C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allow remote attackers to inject arbitrary web script or HTML via the (1) username (aka fmusername), (2) password (aka fmpassword), or (3) server (aka fmserver) field in a fetchmail_prefs_save action, related to the Fetchmail configuration, a different issue than CVE-2010-3695.  NOTE: some of these details are obtained from third party information."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS) en fetchmailprefs.php en Horde IMP antes de v4.3.8, y Horde Groupware Webmail Edition anterior a v1.2.7, permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s de los campos  ( 1 ) nombre de usuario (tambi\u00e9n conocido como fmusername ), ( 2 ) contrase\u00f1a ( fmpassword alias ), o (3 ) servidor ( tambi\u00e9n conocido como fmserver ) de la acci\u00f3n fetchmail_prefs_save, relacionados con la configuraci\u00f3n de Fetchmail, una cuesti\u00f3n diferente a CVE - 2010-3695.  NOTA: algunos de estos detalles han sido obtenidos de informaci\u00f3n de terceros.."}], "id": "CVE-2010-4778", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2011-04-04T12:27:36.437", "references": [{"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://git.horde.org/diff.php/imp/fetchmailprefs.php?rt=horde&r1=1.39.4.10&r2=1.39.4.11"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2010/2513"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://git.horde.org/diff.php/imp/fetchmailprefs.php?rt=horde&r1=1.39.4.10&r2=1.39.4.11"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2010/2513"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}