First published: Wed Apr 27 2005(Updated: )
Cross-site scripting (XSS) vulnerability in Horde Accounts module before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Horde Accounts | =2.1 | |
Horde Accounts | =2.1.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-1316 is classified as a moderate severity XSS vulnerability.
To fix CVE-2005-1316, you should upgrade to Horde Accounts version 2.1.2 or later.
Exploiting CVE-2005-1316 allows attackers to inject arbitrary web scripts or HTML into the application.
CVE-2005-1316 affects Horde Accounts versions before 2.1.2, including 2.1 and 2.1.1.
Yes, CVE-2005-1316 is a cross-site scripting (XSS) vulnerability.