4.3

CVE-2005-4080

Exploit
Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via UTF16 encoded attachments and strings that will be executed when viewed using Internet Explorer, which ignores the characters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Horde ≫ Imp Version2.0
Horde ≫ Imp Version2.2
Horde ≫ Imp Version2.2.1
Horde ≫ Imp Version2.2.2
Horde ≫ Imp Version2.2.3
Horde ≫ Imp Version2.2.4
Horde ≫ Imp Version2.2.5
Horde ≫ Imp Version2.2.6
Horde ≫ Imp Version2.2.7
Horde ≫ Imp Version2.2.8
Horde ≫ Imp Version2.3
Horde ≫ Imp Version3.0
Horde ≫ Imp Version3.1
Horde ≫ Imp Version3.1.2
Horde ≫ Imp Version3.2
Horde ≫ Imp Version3.2.1
Horde ≫ Imp Version3.2.2
Horde ≫ Imp Version3.2.3
Horde ≫ Imp Version3.2.4
Horde ≫ Imp Version3.2.5
Horde ≫ Imp Version4.0
Horde ≫ Imp Version4.0.1
Horde ≫ Imp Version4.0.2
Horde ≫ Imp Version4.0.3
Horde ≫ Imp Version4.0.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.4% 0.819
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/17910
http://securityreason.com/securityalert/232
http://securitytracker.com/id?1015315
http://www.securityfocus.com/archive/1/418734/100/0/threaded
http://www.securityfocus.com/bid/15730/
Exploit
http://www.vupen.com/english/advisories/2005/2773
https://exchange.xforce.ibmcloud.com/vulnerabilities/23465