Package · Ubuntu

php-horde-kronolith

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Unscored —

CVE-2017-16908

In Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource. This can be leveraged for…

php-horde-kronolith php-horde-kronolith Debian Ubuntu

Nov 20, 2017
Unscored —

CVE-2017-16906

In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a "Calendar -> New Event" action.

php-horde-kronolith php-horde-kronolith Debian Ubuntu

Nov 20, 2017