Unrated severityNVD Advisory· Published Jun 15, 2006· Updated Jun 16, 2026
CVE-2006-2195
CVE-2006-2195
Description
Cross-site scripting (XSS) vulnerability in horde 3 (horde3) before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) templates/problem/problem.inc and (2) test.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12cpe:2.3:a:horde:horde:*:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:horde:horde:*:*:*:*:*:*:*:*range: <=3.0.9
- cpe:2.3:a:horde:horde:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:horde:horde:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:horde:horde:3.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:horde:horde:3.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:horde:horde:3.0.4_rc1:*:*:*:*:*:*:*
- cpe:2.3:a:horde:horde:3.0.4_rc2:*:*:*:*:*:*:*
- cpe:2.3:a:horde:horde:3.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:horde:horde:3.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:horde:horde:3.0.8:*:*:*:*:*:*:*
- (no CPE)range: <3.1.1
Patches
Vulnerability mechanics
References
19- www.debian.org/security/2006/dsa-1098nvdPatchVendor Advisory
- secunia.com/advisories/20672nvdVendor Advisory
- secunia.com/advisories/20750nvdVendor Advisory
- secunia.com/advisories/20849nvdVendor Advisory
- bugs.gentoo.org/show_bug.cginvd
- cvs.horde.org/diff.phpnvd
- cvs.horde.org/diff.phpnvd
- overlays.gentoo.org/dev/chtekk/browser/horde/www-apps/horde/files/horde-3.1.1-xss.diffnvd
- secunia.com/advisories/20661nvd
- secunia.com/advisories/20960nvd
- securitytracker.com/idnvd
- www.debian.org/security/2006/dsa-1099nvd
- www.gentoo.org/security/en/glsa/glsa-200606-28.xmlnvd
- www.novell.com/linux/security/advisories/2006_16_sr.htmlnvd
- www.osvdb.org/26513nvd
- www.osvdb.org/26514nvd
- www.securityfocus.com/bid/18436nvd
- www.vupen.com/english/advisories/2006/2356nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/27168nvd
News mentions
0No linked articles in our index yet.