CVE-2006-2195: XSS

Q: What is the severity of CVE-2006-2195?

The severity of CVE-2006-2195 is considered to be medium due to its potential to allow cross-site scripting attacks.

Q: How do I fix CVE-2006-2195?

To fix CVE-2006-2195, upgrade to Horde version 3.1.1 or later, which addresses the XSS vulnerability.

Q: What types of applications are affected by CVE-2006-2195?

CVE-2006-2195 affects various versions of the Horde groupware suite prior to 3.1.1.

Q: What are the consequences of exploiting CVE-2006-2195?

Exploiting CVE-2006-2195 allows attackers to inject arbitrary web scripts or HTML, which can lead to session hijacking or redirecting users.

Q: Is CVE-2006-2195 still a threat today?

While CVE-2006-2195 is less of a threat today due to updates, any running vulnerable versions of Horde remain susceptible if not patched.

Published Jun 15, 2006

Updated

Cross-site scripting (XSS) vulnerability in horde 3 (horde3) before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) templates/problem/problem.inc and (2) test.php.

Affected Software

11 affected components

Horde HORDE<=3.0.9

Horde HORDE=3.0

Horde HORDE=3.0.1

Horde HORDE=3.0.2

Horde HORDE=3.0.3

Horde HORDE=3.0.4

Horde HORDE=3.0.4_rc1

Horde HORDE=3.0.4_rc2

Horde HORDE=3.0.6

Horde HORDE=3.0.7

Horde HORDE=3.0.8

Remediation

Patch Available

http://www.debian.org/security/2006/dsa-1098

Event History

Jun 15, 2006

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-2195?

The severity of CVE-2006-2195 is considered to be medium due to its potential to allow cross-site scripting attacks.

How do I fix CVE-2006-2195?

To fix CVE-2006-2195, upgrade to Horde version 3.1.1 or later, which addresses the XSS vulnerability.

What types of applications are affected by CVE-2006-2195?