Nessus Plugin #15605

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Horde Help Subsystem XSS

Family:

CGI abuses : XSS

Category:

attack

Copyright:

This script is Copyright (C) 2004 George A. Theall

Summary:

Checks for Help Subsystem XSS flaw in Horde

Version:

$Revision: 1.3 $

Cve_id:

-

Bugtraq_id:

11546

Xrefs:

OSVDB:11164

Description:

The target is running at least one instance of Horde in which the
help subsystem is vulnerable to a cross site scripting attack since
information passed to the help window is not properly sanitized.

Solution : Upgrade to Horde version 2.2.7 or later.

Risk factor : Low