ID de Prueba:	1.3.6.1.4.1.25623.1.0.12263
Categoría:	Web application abuses
Título:	Horde IMP Content-Type XSS Vulnerability
Resumen:	The remote server is running at least one instance of Horde IMP whose version; number is between 2.0 and 3.2.3 inclusive.
Descripción:	Summary: The remote server is running at least one instance of Horde IMP whose version number is between 2.0 and 3.2.3 inclusive. Vulnerability Insight: Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to cause a victim to unknowingly run arbitrary Javascript code simply by reading a MIME message with a specially crafted Content-Type header. For information about the vulnerability, including exploits, see the referenced links. Solution: Upgrade to Horde IMP version 3.2.4 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0584 BugTraq ID: 10501 http://www.securityfocus.com/bid/10501 http://www.gentoo.org/security/en/glsa/glsa-200406-11.xml http://www.horde.org/imp/3.2/ http://secunia.com/advisories/11805 XForce ISS Database: imp-content-type-xss(16357) https://exchange.xforce.ibmcloud.com/vulnerabilities/16357
Copyright	Copyright (C) 2004 George A. Theall

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.