CVE-2007-1473 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2007-1473
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-1473

Description: Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login page contains a language selection box, allows remote attackers to inject arbitrary web script or HTML via the new_lang parameter to login.php.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/33013 SUSE http://www.novell.com/linux/security/advisories/2007_007_suse.html ST 1017775 SREASON http://securityreason.com/securityalert/2427 SAID Secunia Advisory: SA27565 Secunia Advisory: SA24528 Secunia Advisory: SA24995 OSVDB 33084 MLIST http://lists.horde.org/archives/announce/2007/000315.html DEBIAN http://www.debian.org/security/2007/dsa-1406 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/462915/100/0/threaded BID 22984

Return to the previous page.