Unrated severityNVD Advisory· Published Apr 4, 2011· Updated Apr 29, 2026
CVE-2010-3447
CVE-2010-3447
Description
Cross-site scripting (XSS) vulnerability in view.php in the file viewer in Horde Gollem before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the file parameter in a view_file action.
Affected products
14cpe:2.3:a:horde:gollem:*:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:a:horde:gollem:*:*:*:*:*:*:*:*range: <=1.1.1
- cpe:2.3:a:horde:gollem:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:horde:gollem:1.0:alpha:*:*:*:*:*:*
- cpe:2.3:a:horde:gollem:1.0:beta:*:*:*:*:*:*
- cpe:2.3:a:horde:gollem:1.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:horde:gollem:1.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:horde:gollem:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:horde:gollem:1.0.1:rc1:*:*:*:*:*:*
- cpe:2.3:a:horde:gollem:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:horde:gollem:1.0.2:rc1:*:*:*:*:*:*
- cpe:2.3:a:horde:gollem:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:horde:gollem:1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:horde:gollem:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:horde:gollem:1.1:rc1:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
11- lists.horde.org/archives/announce/2010/000565.htmlnvdPatch
- lists.horde.org/archives/commits/2010-August/004747.htmlnvdPatch
- openwall.com/lists/oss-security/2010/09/30/8nvdPatch
- bugs.horde.org/ticket/9191nvdExploitPatch
- openwall.com/lists/oss-security/2010/09/29/11nvdExploitPatch
- openwall.com/lists/oss-security/2010/09/30/5nvdExploitPatch
- openwall.com/lists/oss-security/2010/09/30/7nvdExploitPatch
- secunia.com/advisories/41624nvdVendor Advisory
- www.vupen.com/english/advisories/2010/2523nvdVendor Advisory
- www.osvdb.org/68262nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/62091nvd
News mentions
0No linked articles in our index yet.