CVE-2008-3824: XSS
Cross-site scripting (XSS) vulnerability in (1) TextFilter/Filter/xss.php in Horde 3.1.x before 3.1.9 and 3.2.x before 3.2.2 and (2) externalinput.php in Popoon r22196 and earlier allows remote attackers to inject arbitrary web script or HTML by using / (slash) characters as replacements for spaces in an HTML e-mail message.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3824?
CVE-2008-3824 is classified as a high severity vulnerability due to its potential for remote code execution through XSS attacks.
How does CVE-2008-3824 allow attacks to occur?
CVE-2008-3824 allows attackers to inject arbitrary web scripts or HTML by replacing spaces with slash characters, bypassing input validation.
Which versions of Horde are affected by CVE-2008-3824?
CVE-2008-3824 impacts Horde versions 3.1.x before 3.1.9 and 3.2.x before 3.2.2.
Is CVE-2008-3824 a risk for Popoon users?
Yes, CVE-2008-3824 affects Popoon versions up to and including r22196.
How can I fix the vulnerability identified by CVE-2008-3824?
To fix CVE-2008-3824, update Horde to version 3.1.9 or 3.2.2 and later, or apply any available patches.