Turba Contact Manager HTML Injection Vulnerability

Bugtraq ID:	29743
Class:	Input Validation Error
CVE:	CVE-2008-6746
Remote:	Yes
Local:	No
Published:	Jun 13 2008 12:00AM
Updated:	May 07 2015 05:28PM
Credit:	Horde
Vulnerable:	Horde Project Groupware Webmail Edition 1.0.6 Horde Project Groupware 1.0.5 Horde Turba Contact Manager 2.1.7 Horde Turba Contact Manager 2.1.6 Horde Turba Contact Manager 2.1.5 Horde Turba Contact Manager 2.0.5 Horde Turba Contact Manager 2.0.4
Not Vulnerable:	Horde Project Groupware Webmail Edition 1.1.1 Horde Project Groupware 1.1.1 Horde Turba Contact Manager 2.2.1

Turba Contact Manager HTML Injection Vulnerability

Turba Contact Manager is prone to a HTML-injection vulnerability because it fails to properly sanitize user-supplied input.

Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

All versions up to Turba Contact Manager 2.2.1 are vulnerable.

Turba Contact Manager HTML Injection Vulnerability

Attackers would likely exploit this issue via a browser.

Turba Contact Manager HTML Injection Vulnerability

Solution:
The vendor has released updates. Please see the references for more information.

Turba Contact Manager HTML Injection Vulnerability

References:

• [announce] Horde Groupware Webmail Edition 1.1.1 (final) (Horde)
  
• [announce] Turba H3 (2.2.1) (final) (Horde)
  
• Horde Groupware 1.1.1 (final) (Horde)
  
• Turba Contact Manager (Horde Project)