Unscored severity · published Dec 13, 2005
CVE-2005-4191
Multiple cross-site scripting (XSS) vulnerabilities in templates/tasklists/tasklists.inc in Horde Nag Task List Manager H3 before 2.0.4 allow remote authenticated users to inject…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in templates/tasklists/tasklists.inc in Horde Nag Task List Manager H3 before 2.0.4 allow remote authenticated users to inject arbitrary web script or HTML via (1) the tasklist's name or (2) description, when creating a new tasklist.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NT
Nag Task List Manager H3 · Horde
1.1; 1.1.1; 1.1.2; 1.1.3; 2.0; 2.0.1; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-4191
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-4191
Patch
http://cvs.horde.org/diff.php/nag/templates/tasklists/tasklists.inc?r1=1.10&r2=1.11&ty=h
Patch
http://lists.horde.org/archives/announce/2005/000236.html
Patch
http://secunia.com/advisories/17969
Vendor Advisory
http://www.sec-consult.com/245.html
www.securityfocus.com
http://www.securityfocus.com/bid/15804
www.vupen.com
http://www.vupen.com/english/advisories/2005/2836