Multiple Horde Products Cross-Site Scripting Vulnerabilities and File Overwrite Vulnerability

Bugtraq ID: 36382
Class: Input Validation Error
CVE: CVE-2009-3236
CVE-2009-4363
Remote: Yes
Local: No
Published: Sep 14 2009 12:00AM
Updated: Apr 13 2015 09:52PM
Credit: Stefan Esser from SektionEins, Martin Geisler, David Wharton
Vulnerable: S.u.S.E. openSUSE 11.0
Horde Project Horde 3.3.4
Horde Project Horde 3.3.3
Horde Project Horde 3.3.2
Horde Project Horde 3.3.1
Horde Project Horde 3.3
Horde Project Horde 3.2.4
Horde Project Horde 3.2.3
Horde Project Horde 3.2.2
Horde Project Horde 3.2.1
Horde Project Horde 3.2
Horde Project Groupware Webmail Edition 1.1.5
Horde Project Groupware Webmail Edition 1.1.4
Horde Project Groupware Webmail Edition 1.1.3
Horde Project Groupware Webmail Edition 1.1.2
Horde Project Groupware Webmail Edition 1.1.1
Horde Project Groupware Webmail Edition 1.0.8
Horde Project Groupware Webmail Edition 1.0.7
Horde Project Groupware Webmail Edition 1.0.6
Horde Project Groupware Webmail Edition 1.0.5
Horde Project Groupware Webmail Edition 1.0.4
Horde Project Groupware Webmail Edition 1.0.3
Horde Project Groupware Webmail Edition 1.0-RC2
Horde Project Groupware Webmail Edition 1.0
Horde Project Groupware Webmail Edition 0
Horde Project Groupware 1.1.5
Horde Project Groupware 1.1.4
Horde Project Groupware 1.1.3
Horde Project Groupware 1.1.2
Horde Project Groupware 1.1.1
Horde Project Groupware 1.0.7
Horde Project Groupware 1.0.6
Horde Project Groupware 1.0.5
Horde Project Groupware 1.0.4
Horde Project Groupware 1.0.3
Horde Project Groupware 1.0.2
Horde Project Groupware 1.0-RC3
Horde Project Groupware 1.0
Horde Project Groupware 0
Gentoo Linux
Debian Linux 5.0 sparc
Debian Linux 5.0 s/390
Debian Linux 5.0 powerpc
Debian Linux 5.0 mipsel
Debian Linux 5.0 mips
Debian Linux 5.0 m68k
Debian Linux 5.0 ia-64
Debian Linux 5.0 ia-32
Debian Linux 5.0 hppa
Debian Linux 5.0 armel
Debian Linux 5.0 arm
Debian Linux 5.0 amd64
Debian Linux 5.0 alpha
Debian Linux 5.0
Debian Linux 4.0 sparc
Debian Linux 4.0 s/390
Debian Linux 4.0 powerpc
Debian Linux 4.0 mipsel
Debian Linux 4.0 mips
Debian Linux 4.0 m68k
Debian Linux 4.0 ia-64
Debian Linux 4.0 ia-32
Debian Linux 4.0 hppa
Debian Linux 4.0 armel
Debian Linux 4.0 arm
Debian Linux 4.0 amd64
Debian Linux 4.0 alpha
Debian Linux 4.0
Not Vulnerable: Horde Project Horde 3.3.5
Horde Project Horde 3.2.5
Horde Project Groupware Webmail Edition 1.1.6
Horde Project Groupware 1.1.6


 

Privacy Statement
Copyright 2010, SecurityFocus