4.3

CVE-2006-4255

Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors related to folder names, as injected into the vfolder_label form field in the IMP search screen.

Data is provided by the National Vulnerability Database (NVD)
Horde ≫ Horde Version3.0
Horde ≫ Horde Version3.0.1
Horde ≫ Horde Version3.0.2
Horde ≫ Horde Version3.0.3
Horde ≫ Horde Version3.0.4
Horde ≫ Horde Version3.0.4_rc1
Horde ≫ Horde Version3.0.4_rc2
Horde ≫ Horde Version3.0.6
Horde ≫ Horde Version3.0.7
Horde ≫ Horde Version3.0.8
Horde ≫ Horde Version3.0.9
Horde ≫ Horde Version3.1
Horde ≫ Horde Version3.1.1
Horde ≫ Imp Version2.0
Horde ≫ Imp Version2.2
Horde ≫ Imp Version2.2.1
Horde ≫ Imp Version2.2.2
Horde ≫ Imp Version2.2.3
Horde ≫ Imp Version2.2.4
Horde ≫ Imp Version2.2.5
Horde ≫ Imp Version2.2.6
Horde ≫ Imp Version2.2.7
Horde ≫ Imp Version2.2.8
Horde ≫ Imp Version2.3
Horde ≫ Imp Version3.0
Horde ≫ Imp Version3.1
Horde ≫ Imp Version3.1.2
Horde ≫ Imp Version3.2
Horde ≫ Imp Version3.2.1
Horde ≫ Imp Version3.2.2
Horde ≫ Imp Version3.2.3
Horde ≫ Imp Version3.2.4
Horde ≫ Imp Version3.2.5
Horde ≫ Imp Version4.0
Horde ≫ Imp Version4.0.1
Horde ≫ Imp Version4.0.2
Horde ≫ Imp Version4.0.3
Horde ≫ Imp Version4.0.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.8% 0.733
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N