EDB-29745

functional

Horde Framework 3.1.3 - 'login.php' Cross-Site Scripting

view exploit source exploit_dbverifiedtype webappsauthor Moritz Naumannpublished 2007-03-15catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2007-1473USmedium4.3Exploit
Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login page contains a language selection box, allows remote attacker…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan