Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors related to folder names, as injected into the vfolder_label form field in the IMP search screen.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Horde产品'search.php'模块跨站脚本执行漏洞
Vulnerability Description
Horde是个以PHP为基础的架构，用来创建网络用程式。 在Horde产品的搜索屏幕中，一些指定的字段存在跨站脚本漏洞： s <i>Virtual folder label:</i> <input type="text" id="vfolder_label" name="vfolder_label" value=""><script>alert('scipAG');</script>" /> 攻击者可以通过HTTP POST请求注入恶意脚本。
CVSS Information
N/A
Vulnerability Type
N/A