CVE-2006-4256

Published: 21 August 2006

index.php in Horde Application Framework before 3.1.2 allows remote attackers to include web pages from other sites, which could be useful for phishing attacks, via a URL in the url parameter, aka "cross-site referencing." NOTE: some sources have referred to this issue as XSS, but it is different than classic XSS.

Priority

Status

Package	Release	Status
horde3 Launchpad, Ubuntu, Debian	dapper	Ignored (end of life)
	edgy	Released (3.1.3-1)
	feisty	Released (3.1.3-1)
	gutsy	Released (3.1.3-1)
	hardy	Released (3.1.3-1)
	intrepid	Released (3.1.3-1)
	jaunty	Released (3.1.3-1)
	karmic	Released (3.1.3-1)
	upstream	Needs triage

References

https://www.cve.org/CVERecord?id=CVE-2006-4256
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.