Cross-site scripting (XSS) vulnerability in (1) Text_Filter/Filter/xss.php in Horde 3.1.x before 3.1.9 and 3.2.x before 3.2.2 and (2) externalinput.php in Popoon r22196 and earlier allows remote attackers to inject arbitrary web script or HTML by using / (slash) characters as replacements for spaces in an HTML e-mail message.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2008-09-12T16:00:00
Updated: 2018-10-11T19:57:01
Reserved: 2008-08-27T00:00:00
Link: CVE-2008-3824
JSON object: View
NVD Information
Status : Modified
Published: 2008-09-12T16:56:20.540
Modified: 2018-10-11T20:49:50.730
Link: CVE-2008-3824
JSON object: View
Redhat Information
No data.
CWE