FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

horde -- cross-site scripting vulnerability in help window

Affected packages
	horde	<	2.2.7
	horde-devel	<	2.2.7

Details

VuXML ID	ed1d404d-2784-11d9-b954-000bdb1444a4
Discovery	2004-10-06
Entry	2004-10-27

A Horde Team announcement states that a potential cross-site scripting vulnerability in the help window has been corrected. The vulnerability appears to involve the handling of the topic and module parameters of the help window template.

References

Message

20041026115303.10FBEC046E@neo.wg.de