![]() |
Inicial ▼ Bookkeeping
Online ▼ Auditorias ▼
DNS
Administrado ▼
Acerca de DNS
Ordenar/Renovar
Preguntas Frecuentes
AUP
Dynamic DNS Clients
Configurar Dominios Dynamic DNS Update Password Monitoreo
de Redes ▼
Enterprise
Avanzado
Estándarr
Prueba
Preguntas Frecuentes
Resumen de Precio/Funciones
Ordenar
Muestras
Configure/Status Alert Profiles | ||
ID de Prueba: | 1.3.6.1.4.1.25623.1.0.11815 |
Categoría: | Web application abuses |
Título: | Horde IMP_MIME_Viewer_html class XSS vulnerabilities |
Resumen: | The remote server is running at least one instance of Horde IMP whose; version number is between 3.0 and 3.2.1 inclusive. |
Descripción: | Summary: The remote server is running at least one instance of Horde IMP whose version number is between 3.0 and 3.2.1 inclusive. Vulnerability Impact: Such versions are vulnerable to several cross-scripting attacks whereby an attacker can cause a victim to unknowingly run arbitrary Javascript code simply by reading an HTML message from the attacker. Announcements of the vulnerabilities can be found at the referenced links. Solution: Upgrade to Horde IMP version 3.2.2 or later or apply patches found in the announcements to imp/lib/MIME/Viewer/html.php. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P |
Copyright | Copyright (C) 2003-2004 George A. Theall |
Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |