Description
Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript embedded in an email.
References
- CLA-2001:410 vendor-advisory
- CSSA-2001-027.0 vendor-advisory
- DSA-073 vendor-advisory
- imp-cross-site-scripting(6905) vdb-entry
- http://online.securityfocus.com/archive/1/198495
- 3082 vdb-entry