Unrated severityNVD Advisory· Published Sep 12, 2008· Updated Jun 16, 2026
CVE-2008-3823
CVE-2008-3823
Description
Cross-site scripting (XSS) vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of a MIME attachment in an e-mail message.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:horde:horde:3.2:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:horde:horde:3.2:*:*:*:*:*:*:*
- cpe:2.3:a:horde:horde:3.2.1:*:*:*:*:*:*:*
- (no CPE)range: <3.2.2
- Range: <3.2.2
Patches
Vulnerability mechanics
References
12- marc.infonvdPatch
- ocert.org/patches/2008-012/MIME.patchnvdPatch
- www.openwall.com/lists/oss-security/2008/09/10/1nvdPatch
- www.securityfocus.com/bid/31110nvdExploit
- secunia.com/advisories/31842nvdVendor Advisory
- secunia.com/advisories/31959nvd
- securityreason.com/securityalert/4245nvd
- www.debian.org/security/2008/dsa-1642nvd
- www.ocert.org/advisories/ocert-2008-012.htmlnvd
- www.securityfocus.com/archive/1/496182/100/0/threadednvd
- www.vupen.com/english/advisories/2008/2548nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/45030nvd
News mentions
0No linked articles in our index yet.