Cross-site scripting (XSS) vulnerability in horde/templates/topbar/_menubar.html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter, as demonstrated by a request to xplorer/gollem/manager.php.

**horde 5.2.9** * [jan] SECURITY: Fix XSS vulnerability in menu bar exposed by few applications (Bug #14213). * [jan] Add more detailed user DN settings to Kolab group configuration (Request #11737). * [jan] Fix returning to last page after problem reporting from AJAX pages (Bug #12112). * [jan] Fix custom database configuration for groups (Bug #11664). * [jan] Use access rules compatible with both Apache 2.2 and 2.4. * [mjr] Fix reporting results for non- select queries in administrative sql shell (Bug #14216).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that php-horde, a flexible, modular, general-purpose web application framework written in PHP, is prone to a cross-site scripting vulnerability.

The Horde Team reports :

Fixed XSS vulnerabilities in menu bar and form renderer.

ID	Name	Product	Family	Severity
89553	Fedora 23 : php-horde-horde-5.2.9-1.fc23 (2016-5d0e7f15ef)	Nessus	Fedora Local Security Checks	medium
89520	Fedora 22 : php-horde-horde-5.2.9-1.fc22 (2016-3d1183830b)	Nessus	Fedora Local Security Checks	medium
89003	Debian DSA-3497-1 : php-horde - security update	Nessus	Debian Local Security Checks	medium
88730	FreeBSD : horde -- XSS vulnerabilities (3aa8b781-d2c4-11e5-b2bd-002590263bf5)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2016-2228

medium

Tenable Plugins

medium

medium

medium

medium