BID:37351

Horde Application Framework Administration Interface 'PHP_SELF' Cross-Site Scripting Vulnerability

Info

Horde Application Framework Administration Interface 'PHP_SELF' Cross-Site Scripting Vulnerability

Bugtraq ID:	37351
Class:	Input Validation Error
CVE:	CVE-2009-3701
Remote:	Yes
Local:	No
Published:	Dec 15 2009 12:00AM
Updated:	May 07 2015 05:12PM
Credit:	Juan Galiana Lara
Vulnerable:	S.u.S.E. openSUSE 11.0 Horde Project Horde 3.3.5 Horde Project Horde 3.3.4 Horde Project Horde 3.3.3 Horde Project Horde 3.3.2 Horde Project Horde 3.3.1 Horde Project Horde 3.3 Horde Project Horde 3.2.5 Horde Project Horde 3.2.4 Horde Project Horde 3.2.3 Horde Project Horde 3.2.2 Horde Project Horde 3.2.1 Horde Project Horde 3.1.9 Horde Project Horde 3.1.8 Horde Project Horde 3.1.7 Horde Project Horde 3.1.6 Horde Project Horde 3.1.5 Horde Project Horde 3.1.4 Horde Project Horde 3.1.3 Horde Project Horde 3.1.2 Horde Project Horde 3.1.1 Horde Project Horde 3.0.11 Horde Project Horde 3.0.10 Horde Project Horde 3.0.9 Horde Project Horde 3.0.8 Horde Project Horde 3.0.7 Horde Project Horde 3.0.6 Horde Project Horde 3.0.4 -RC 2 Horde Project Horde 3.0.4 -RC 1 Horde Project Horde 3.0.4 Horde Project Horde 3.0.3 Horde Project Horde 3.0.2 Horde Project Horde 3.0.1 Horde Project Horde 3.0 Horde Project Horde 3.2 Horde Project Horde 3.1 Horde Project Groupware Webmail Edition 1.2.4 Horde Project Groupware Webmail Edition 1.2.3 RC1 Horde Project Groupware Webmail Edition 1.2.2 Horde Project Groupware Webmail Edition 1.2.1 Horde Project Groupware Webmail Edition 1.2 Horde Project Groupware 1.2.4 Horde Project Groupware 1.2.1 Horde Project Groupware 1.2 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0

Not Vulnerable:	Horde Project Horde 3.3.6 Horde Project Groupware Webmail Edition 1.2.5 Horde Project Groupware 1.2.5

Discussion

Horde Application Framework Administration Interface 'PHP_SELF' Cross-Site Scripting Vulnerability

Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects versions prior to Horde 3.3.6.

Note that additional products that use the Horde framework may also be vulnerable.

Exploit / POC

Horde Application Framework Administration Interface 'PHP_SELF' Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing a user to visit a malicious site.

The following example URIs are available:

/data/vulnerabilities/exploits/37351.txt

Solution / Fix

Horde Application Framework Administration Interface 'PHP_SELF' Cross-Site Scripting Vulnerability

Solution:
Updates are available. Please see the references for more information.

Debian Linux 5.0 ia-64