← Database

CVE-2008-3650

CRITICAL CVSS: 9.0 Published: 2008-08-13 Modified: 2026-06-16

Description

Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and attack vectors related to "unescaped output," possibly cross-site scripting (XSS), in the (1) object browser and (2) contact view.

Affected Platforms

Horde Groupware Webmail Edition

Weakness Type

NVD-CWE-noinfo

References