NetSight
critical9.0

CVE-2008-3650

Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and attack vectors related to "unescaped outpu…

Impact

Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and attack vectors related to "unescaped output," possibly cross-site scripting (XSS), in the (1) object browser and (2) contact view.

Affected products

VendorProductAffected versions
HordeGroupware Webmail Edition
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5

References