AF
Product
Application Framework
8
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Application Framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-4363 | – | Dec 21 | Text_Filter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 does not… Affected: through 3.3.5; 2.0; 2.1; 2.1.3; 2.2; 2.2.1; +26 more |
| CVE-2009-3701 | – | Dec 21 | Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware… Affected: through 3.3.5; 2.0; 2.1; 2.1.3; 2.2; 2.2.1; +26 more |
| CVE-2009-3236 | – | Sep 17 | The form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before… Affected: 3.2; 3.2.1; 3.2.2; 3.2.3; 3.2.4; 3.3; +4 more |
| CVE-2008-5917 | – | Jan 21 | Cross-site scripting (XSS) vulnerability in the XSS filter (framework/Text_Filter/Filter/xss.php) in Horde Application Framework 3.2.2 and 3.3, when Internet Explorer is being… Affected: 3.2.2; 3.3 |
| CVE-2006-4256 | – | Aug 21 | index.php in Horde Application Framework before 3.1.2 allows remote attackers to include web pages from other sites, which could be useful for phishing attacks, via a URL in the… Affected: 3.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.4_rc1; +7 more |
| CVE-2006-1491 | – | Mar 29 | Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer Affected: 3.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.4_rc1; +6 more |
| CVE-2005-0961 | – | May 2 | Cross-site scripting (XSS) vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title Affected: 3.0.4_rc1 |
| CVE-2004-2741 | – | Dec 31 | Cross-site scripting (XSS) vulnerability in the "help window" (help.php) in Horde Application Framework 2.2.6 allows remote attackers to inject arbitrary web script or HTML via… Affected: 2.0; 2.1; 2.1.3; 2.2; 2.2.1; 2.2.3; +4 more |
Showing 8