CVE-2008-3330

Horde 3.2-Turba 2.2 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in services/obrowser/index.php in Horde 3.2 and Turba 2.2 allows remote attackers to inject arbitrary web script or HTML via the contact name.

References (6)

Scores

EPSS 0.0047
EPSS Percentile 64.5%

Classification

CWE
CWE-79
Status draft

Affected Products (2)

debian/horde
debian/turba

Timeline

Published Jul 27, 2008
Tracked Since Feb 18, 2026