Cross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML via the subdir parameter.

It was discovered that horde3, the horde web application framework, is prone to a cross-site scripting attack and a cross-site request forgery.

Fix 2 security bugs by upgrading to 3.3.9

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of the Horde application framework hosted on the remote web server fails to sanitize user input to the 'subdir' parameter of the 'util/icon_browser.php' script before using it to generate dynamic HTML output.

An attacker may be able to leverage this issue to inject arbitrary HTML or script code into a user's browser to be executed within the security context of the affected site.

ID	Name	Product	Family	Severity
55610	Debian DSA-2278-1 : horde3 - several vulnerabilities	Nessus	Debian Local Security Checks	medium
50497	Fedora 13 : horde-3.3.9-1.fc13 (2010-16555)	Nessus	Fedora Local Security Checks	medium
50496	Fedora 14 : horde-3.3.9-1.fc14 (2010-16525)	Nessus	Fedora Local Security Checks	medium
50478	Fedora 12 : horde-3.3.9-1.fc12 (2010-16592)	Nessus	Fedora Local Security Checks	medium
49119	Horde util/icon_browser.php subdir Parameter XSS	Nessus	CGI abuses : XSS	medium

Detections

Analytics

CVE-2010-3077

medium

Tenable Plugins

medium

medium

medium

medium

medium