CVE:CVE-2012-0909
CNNVD:CNNVD-201202-227
Horde Groupware Webmail Edition 4.0.6之前版本的Horde_Form中存在跨站脚本漏洞。远程攻击者可利用该漏洞借助与邮箱验证相关的未明向量注入任意web脚本或者HTML。
solution:Upgrade horde groupware_webmail_edition to a higher version than 4.0.5,1.0,1.0:rc1,1.0:rc2,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.1,1.1:rc1,1.1:rc2,1.1:rc3,1.1:rc4,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.2,1.2:rc1,1.2.1,1.2.2,1.2.3,1.2.3:rc1,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10,4.0,4.0:rc1,4.0:rc2,4.0.1,4.0.2,4.0.3,4.0.4,and avoid the version (,4.0.5],1.0,1.0:rc1,1.0:rc2,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.1,1.1:rc1,1.1:rc2,1.1:rc3,1.1:rc4,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.2,1.2:rc1,1.2.1,1.2.2,1.2.3,1.2.3:rc1,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10,4.0,4.0:rc1,4.0:rc2,4.0.1,4.0.2,4.0.3,4.0.4