Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers to inject arbitrary web script or HTML via vectors involving numeric form fields.

**horde 5.2.9** * [jan] SECURITY: Fix XSS vulnerability in menu bar exposed by few applications (Bug #14213). * [jan] Add more detailed user DN settings to Kolab group configuration (Request #11737). * [jan] Fix returning to last page after problem reporting from AJAX pages (Bug #12112). * [jan] Fix custom database configuration for groups (Bug #11664). * [jan] Use access rules compatible with both Apache 2.2 and 2.4. * [mjr] Fix reporting results for non- select queries in administrative sql shell (Bug #14216).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that php-horde-core, a set of classes providing the core functionality of the Horde Application Framework, is prone to a cross-site scripting vulnerability.

The Horde Team reports :

Fixed XSS vulnerabilities in menu bar and form renderer.

ID	Name	Product	Family	Severity
89553	Fedora 23 : php-horde-horde-5.2.9-1.fc23 (2016-5d0e7f15ef)	Nessus	Fedora Local Security Checks	medium
89520	Fedora 22 : php-horde-horde-5.2.9-1.fc22 (2016-3d1183830b)	Nessus	Fedora Local Security Checks	medium
89002	Debian DSA-3496-1 : php-horde-core - security update	Nessus	Debian Local Security Checks	medium
88730	FreeBSD : horde -- XSS vulnerabilities (3aa8b781-d2c4-11e5-b2bd-002590263bf5)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2015-8807

medium

Tenable Plugins

medium

medium

medium

medium