CVE:CVE-2008-2783
CNNVD:CNNVD-200806-283
Horde Groupware, Groupware Webmail Edition, 和 Kronolith中存在多个跨站脚本攻击漏洞，远程攻击者通过对1) week.php, (2) workweek.php, 和 (3) day.php; 及 (4) 对默认URI的PATH_INFO中的horde参数的timestamp参数，以注入任意web脚本或HTML。
solution:Upgrade horde groupware to a higher version than *; Upgrade horde groupware_webmail_edition to a higher version than *; Upgrade horde kronolith to a higher version than *