| Vulnerability Name: | CVE-2004-0584 (CCN-16357) | ||||||||
| Assigned: | 2004-06-08 | ||||||||
| Published: | 2004-06-08 | ||||||||
| Updated: | 2017-07-11 | ||||||||
| Summary: | Unknown vulnerability in Horde IMP 3.2.3 and earlier, before a "security fix," does not properly validate input, which allows remote attackers to execute arbitrary script as other users via script or HTML in an e-mail message, possibly triggering a cross-site scripting (XSS) vulnerability. | ||||||||
| CVSS v3 Severity: | 5.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2004-0584 Source: CCN Type: SA11805 Horde IMP "Content-Type:" Header Script Insertion Vulnerability Source: SECUNIA Type: Patch, Vendor Advisory 11805 Source: CCN Type: GLSA-200406-11 Horde-IMP: Input validation vulnerability Source: GENTOO Type: Patch, Vendor Advisory GLSA-200406-11 Source: CCN Type: Horde Web site IMP news Source: MISC Type: Patch http://www.horde.org/imp/3.2/ Source: CCN Type: GLSA 200406-11 Horde-IMP: Input validation vulnerability Source: CCN Type: OSVDB ID: 55372 Horde IMP mime.php Content-Type XSS Source: CCN Type: OSVDB ID: 55374 IlohaMail mime.php Content-Type XSS Source: CCN Type: OSVDB ID: 55375 Sqwebmail mime.php Content-Type XSS Source: CCN Type: OSVDB ID: 55376 BasiliX mime.php Content-Type XSS Source: BID Type: Patch 10501 Source: CCN Type: BID-10501 Horde IMP Email Header HTML Injection Vulnerability Source: XF Type: UNKNOWN imp-content-type-xss(16357) Source: XF Type: UNKNOWN imp-content-type-xss(16357) | ||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||
| BACK | |||||||||