CVE-2006-4256: XSS
index.php in Horde Application Framework before 3.1.2 allows remote attackers to include web pages from other sites, which could be useful for phishing attacks, via a URL in the url parameter, aka "cross-site referencing." NOTE: some sources have referred to this issue as XSS, but it is different than classic XSS.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4256?
CVE-2006-4256 is classified as a medium severity vulnerability due to its potential for phishing attacks.
How do I fix CVE-2006-4256?
To mitigate CVE-2006-4256, upgrade to Horde Application Framework version 3.1.2 or later.
What types of applications are affected by CVE-2006-4256?
CVE-2006-4256 affects various versions of the Horde Application Framework, specifically versions prior to 3.1.2.
What attack vector does CVE-2006-4256 exploit?
CVE-2006-4256 exploits the url parameter in index.php to allow inclusion of web pages from other sites.
Can CVE-2006-4256 be exploited remotely?
Yes, CVE-2006-4256 can be exploited remotely by attackers to initiate phishing attacks.