Unscored severity · published Sep 23, 2008
CVE-2008-4182
Cross-site scripting (XSS) vulnerability in imp/test.php in Horde Turba Contact Manager H3 2.2.1 and other versions before 2.3.1, and possibly other Horde Project products, allows…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in imp/test.php in Horde Turba Contact Manager H3 2.2.1 and other versions before 2.3.1, and possibly other Horde Project products, allows remote attackers to inject arbitrary web script or HTML via the User field in an IMAP session.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TC
Turba Contact Manager H3 · Horde
2.2.1; 3.1.1; 3.2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4182
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4182
lists.horde.org
http://lists.horde.org/archives/announce/2008/000465.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
packetstormsecurity.org
http://packetstormsecurity.org/0809-exploits/turba-xss.txt
secunia.com
http://secunia.com/advisories/34703
www.debian.org
http://www.debian.org/security/2009/dsa-1770
www.securityfocus.com
http://www.securityfocus.com/bid/31168