Vulnerabilities

TI-2008-02658 CVE-2008-2783 · GHSA-598g-8pp7-hcwv

Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow remote attackers to inject arbitrary web script or HTML via the timestamp parameter to (1) week.php,…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01505 Published 2008-06-19 No fix listed CWE-79

TI-2006-05939 CVE-2006-6175 · GHSA-3ffm-vqmq-r4hx

Directory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 before 2.0.7…

LOW 37

Directory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 before 2.0.7 and 2.1.x before 2.1.4 allows remote attackers to include arbitrary files and execute PHP code via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0234 Published 2006-11-30 No fix listed

TI-2005-01240 CVE-2005-1314 · GHSA-m7vw-f6mg-63gp

Cross-site scripting (XSS) vulnerability in Horde Kronolith module before 1.1.4 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in Horde Kronolith module before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01228 Published 2005-04-27 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail…

Directory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 before 2.0.7…

Cross-site scripting (XSS) vulnerability in Horde Kronolith module before 1.1.4 allows…