Vulnerabilities > CVE-2005-4192 - Remote HTML Injection vulnerability in Horde Mnemo

047910
CVSS 3.5 - LOW
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
SINGLE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
horde
NVD
Published: 2005-12-13
Updated: 2011-03-08

Summary

Multiple cross-site scripting (XSS) vulnerabilities in templates/notepads/notepads.inc in Horde Mnemo Note Manager H3 before 2.0.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) the notepad's name or (2) description, when creating a new notepad.

Vulnerable Configurations

Part Description Count
Application
Horde
3

References