Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors related to folder names, as injected into the vfolder_label form field in the IMP search screen.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Horde | Horde | 3.0 (including) | 3.0 (including) |
| Horde | Horde | 3.0.1 (including) | 3.0.1 (including) |
| Horde | Horde | 3.0.2 (including) | 3.0.2 (including) |
| Horde | Horde | 3.0.3 (including) | 3.0.3 (including) |
| Horde | Horde | 3.0.4 (including) | 3.0.4 (including) |
| Horde | Horde | 3.0.4_rc1 (including) | 3.0.4_rc1 (including) |
| Horde | Horde | 3.0.4_rc2 (including) | 3.0.4_rc2 (including) |
| Horde | Horde | 3.0.6 (including) | 3.0.6 (including) |
| Horde | Horde | 3.0.7 (including) | 3.0.7 (including) |
| Horde | Horde | 3.0.8 (including) | 3.0.8 (including) |
| Horde | Horde | 3.0.9 (including) | 3.0.9 (including) |
| Horde | Horde | 3.1 (including) | 3.1 (including) |
| Horde | Horde | 3.1.1 (including) | 3.1.1 (including) |
| Imp | Horde | 2.0 (including) | 2.0 (including) |
| Imp | Horde | 2.2 (including) | 2.2 (including) |
| Imp | Horde | 2.2.1 (including) | 2.2.1 (including) |
| Imp | Horde | 2.2.2 (including) | 2.2.2 (including) |
| Imp | Horde | 2.2.3 (including) | 2.2.3 (including) |
| Imp | Horde | 2.2.4 (including) | 2.2.4 (including) |
| Imp | Horde | 2.2.5 (including) | 2.2.5 (including) |
| Imp | Horde | 2.2.6 (including) | 2.2.6 (including) |
| Imp | Horde | 2.2.7 (including) | 2.2.7 (including) |
| Imp | Horde | 2.2.8 (including) | 2.2.8 (including) |
| Imp | Horde | 2.3 (including) | 2.3 (including) |
| Imp | Horde | 3.0 (including) | 3.0 (including) |
| Imp | Horde | 3.1 (including) | 3.1 (including) |
| Imp | Horde | 3.1.2 (including) | 3.1.2 (including) |
| Imp | Horde | 3.2 (including) | 3.2 (including) |
| Imp | Horde | 3.2.1 (including) | 3.2.1 (including) |
| Imp | Horde | 3.2.2 (including) | 3.2.2 (including) |
| Imp | Horde | 3.2.3 (including) | 3.2.3 (including) |
| Imp | Horde | 3.2.4 (including) | 3.2.4 (including) |
| Imp | Horde | 3.2.5 (including) | 3.2.5 (including) |
| Imp | Horde | 4.0 (including) | 4.0 (including) |
| Imp | Horde | 4.0.1 (including) | 4.0.1 (including) |
| Imp | Horde | 4.0.2 (including) | 4.0.2 (including) |
| Imp | Horde | 4.0.3 (including) | 4.0.3 (including) |
| Imp | Horde | 4.0.4 (including) | 4.0.4 (including) |
| Imp4 | Ubuntu | dapper | * |
| Imp4 | Ubuntu | devel | * |
| Imp4 | Ubuntu | edgy | * |
| Imp4 | Ubuntu | feisty | * |
| Imp4 | Ubuntu | gutsy | * |
| Imp4 | Ubuntu | hardy | * |
| Imp4 | Ubuntu | intrepid | * |
| Imp4 | Ubuntu | jaunty | * |
| Imp4 | Ubuntu | karmic | * |