• info
• discussion
• exploit
• solution
• references

Horde Mnemo Remote HTML Injection Vulnerabilities

Solution:
The vendor has released an upgrade (Mnemo H3 2.0.3) dealing with this issue.

Please see the references for more information and vendor advisories.


Horde Mnemo 2.0.2

• Horde mnemo-h3-2.0.3.tar.gz
  ftp://ftp.horde.org/pub/mnemo/mnemo-h3-2.0.3.tar.gz