CVE-2015-8807 in Groupware Webmail Edition
Summary
Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers to inject arbitrary web script or HTML via vectors involving numeric form fields.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
02/03/2016
Disclosure
04/13/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 82320 | Horde Groupware Webmail Edition Html.php _renderVarInput_number cross site scripting | 79 | Not defined | Official fix | CVE-2015-8807 |