4.3
CVE-2007-1473
- EPSS 5.15%
- Veröffentlicht 16.03.2007 21:19:00
- Zuletzt bearbeitet 16.06.2026 22:37:39
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login page contains a language selection box, allows remote attackers to inject arbitrary web script or HTML via the new_lang parameter to login.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Horde ≫ Horde Application Framework Version1.2.0
Horde ≫ Horde Application Framework Version1.2.1
Horde ≫ Horde Application Framework Version1.2.2
Horde ≫ Horde Application Framework Version1.2.3
Horde ≫ Horde Application Framework Version1.2.4
Horde ≫ Horde Application Framework Version1.2.5
Horde ≫ Horde Application Framework Version1.2.6
Horde ≫ Horde Application Framework Version1.2.7
Horde ≫ Horde Application Framework Version1.2.8
Horde ≫ Horde Application Framework Version1.3.3
Horde ≫ Horde Application Framework Version1.3.4
Horde ≫ Horde Application Framework Version2.0
Horde ≫ Horde Application Framework Version2.1
Horde ≫ Horde Application Framework Version2.2
Horde ≫ Horde Application Framework Version2.2.1
Horde ≫ Horde Application Framework Version2.2.3
Horde ≫ Horde Application Framework Version2.2.4
Horde ≫ Horde Application Framework Version2.2.5
Horde ≫ Horde Application Framework Version2.2.6
Horde ≫ Horde Application Framework Version2.2.7
Horde ≫ Horde Application Framework Version2.2.8
Horde ≫ Horde Application Framework Version2.2.9
Horde ≫ Horde Application Framework Version3.0.0
Horde ≫ Horde Application Framework Version3.0.1
Horde ≫ Horde Application Framework Version3.0.2
Horde ≫ Horde Application Framework Version3.0.3
Horde ≫ Horde Application Framework Version3.0.4
Horde ≫ Horde Application Framework Version3.0.5
Horde ≫ Horde Application Framework Version3.0.6
Horde ≫ Horde Application Framework Version3.0.7
Horde ≫ Horde Application Framework Version3.0.8
Horde ≫ Horde Application Framework Version3.0.9
Horde ≫ Horde Application Framework Version3.0.10
Horde ≫ Horde Application Framework Version3.1.0
Horde ≫ Horde Application Framework Version3.1.1
Horde ≫ Horde Application Framework Version3.1.2
Horde ≫ Horde Application Framework Version3.1.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 5.15% | 0.913 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://secunia.com/advisories/24995
http://www.novell.com/linux/security/advisories/2007_007_suse.html
http://secunia.com/advisories/27565
http://www.debian.org/security/2007/dsa-1406
http://lists.horde.org/archives/announce/2007/000315.html
http://secunia.com/advisories/24528
http://securityreason.com/securityalert/2427
http://securitytracker.com/id?1017775
http://www.osvdb.org/33084
http://www.securityfocus.com/archive/1/462915/100/0/threaded
http://www.securityfocus.com/bid/22984
http://www.vupen.com/english/advisories/2007/0965
https://exchange.xforce.ibmcloud.com/vulnerabilities/33013