Upstream information
Description
Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 4.2.2 and 4.3.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) smime.php, (2) pgp.php, and (3) message.php.Novell/SUSE information
Novell Bugzilla entry: 470086 SUSE Security Advisories:- SUSE-SR:2009:007, published Tue, 24 Mar 2009 16:00:00 +0000
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| openSUSE 10.3 |
|