Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_save action, related to the Fetchmail configuration.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: redhat

Published: 2011-03-31T22:00:00

Updated: 2018-10-10T18:57:01

Reserved: 2010-10-01T00:00:00


Link: CVE-2010-3695

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2011-03-31T22:55:01.897

Modified: 2019-06-18T16:44:22.723


Link: CVE-2010-3695

JSON object: View

cve-icon Redhat Information

No data.

CWE