CVE-2005-4242: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the address book and (2) contact data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4242?
CVE-2005-4242 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2005-4242?
To fix CVE-2005-4242, upgrade to Horde Turba H3 version 2.0.5 or later, which addresses these vulnerabilities.
What types of attack vectors are associated with CVE-2005-4242?
CVE-2005-4242 allows remote attackers to exploit multiple cross-site scripting vulnerabilities via the address book and contact data.
Which versions of Horde Turba H3 are affected by CVE-2005-4242?
Versions of Horde Turba H3 affected by CVE-2005-4242 include 2.0.4 and earlier, including 2.0.3, 2.0.2, and 2.0.1.
What is the impact of CVE-2005-4242 on web applications?
The impact of CVE-2005-4242 on web applications includes the risk of attackers injecting arbitrary web scripts or HTML, which can lead to data theft or session hijacking.