Horde Turba H3 vulnerabilities

3 known vulnerabilities affecting horde/turba_h3.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2008-7218CRITICALCVSS 10.0v2.1v2.1.1+5 more2009-09-13

CVE-2008-7218 [CRITICAL] CVE-2008-7218: Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-R Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2 before 2.2-RC2; Kronolith H3 2.1 before 2.1.7 and H3 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and 2.2 before 2.2-RC2; Horde Groupware 1.0 before 1.0.3 and 1.1 before 1.

CVE-2008-6746MEDIUMCVSS 4.3≤ 2.2v0.0.1+25 more2009-04-23

CVE-2008-6746 [MEDIUM] CWE-79 CVE-2008-6746: Cross-site scripting (XSS) vulnerability in the contact display view in Turba Contact Manager H3 bef Cross-site scripting (XSS) vulnerability in the contact display view in Turba Contact Manager H3 before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the contact name.

CVE-2005-4242MEDIUMCVSS 4.3≤ 2.0.4v2.0+3 more2005-12-14

CVE-2005-4242 [MEDIUM] CVE-2005-4242: Multiple cross-site scripting (XSS) vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote Multiple cross-site scripting (XSS) vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the address book and (2) contact data.