Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

Horde IMP search page can run attacker‑supplied code

CVE-2006-4255 · published 20 years ago
Summary

The web‑based email system Horde IMP (versions before 4.1.3) lets a user enter specially crafted folder names that are then displayed on the search screen without proper cleaning. An attacker could inject malicious JavaScript or HTML, potentially stealing session data or performing actions as the logged‑in user. Update to the latest Horde IMP release or apply the vendor’s patch to fix the input handling.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
horde horde 3.0
3.0.1
3.0.2
3.0.3
3.0.4
3.0.4_rc1
3.0.4_rc2
3.0.6
3.0.7
3.0.8
3.0.9
3.1
1 more version range
cpe:2.3:a:horde:horde:3.0:*:*:*:*:*:*:*
horde imp 2.0
2.2
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.3
3.0
13 more version ranges
cpe:2.3:a:horde:imp:2.0:*:*:*:*:*:*:*
Original advisory text
Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors relate...
Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors related to folder names, as injected into the vfolder_label form field in the IMP search screen.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
4.3 Medium
Exploitation
2% chance of attack within 30 days
Timeline
Published21 Aug 2006
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2006-4255 · NVD
Track software like this
Free during beta