Approved changes feed: RSS · Atom

cpe:2.3:a:horde:turba_contact_manager_h3:2.2.1:*:*:*:*:*:*:*

part: a version: 2.2.1 update: *

VendorHorde (11d5bec1-2c1f-5ad3-b7a5-41ab167a139d)
ProductTurba Contact Manager H3 (70393362-2b52-5a05-9888-0abe6668ce17)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/php-horde-turba purl2cpe 2026-06-01 10:15:52.021211
pkg:deb/ubuntu/php-horde-turba purl2cpe 2026-06-01 10:15:52.021214
pkg:github/horde/turba purl2cpe 2026-06-01 10:15:52.021217
pkg:rpm/opensuse/horde5-turba purl2cpe 2026-06-01 10:15:52.021219

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-4182 vulnerable 2026-06-08 04:50:38.131101 Details available
Cross-site scripting (XSS) vulnerability in imp/test.php in Horde Turba Contact Manager H3 2.2.1 and other versions before 2.3.1, and possibly other Horde Project products, allows remote attackers to inject arbitrary web script or HTML via the User field in an IMAP session.
Published: 2008-09-23T15:00:00.000Z
Updated: 2024-08-07T10:08:34.859Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.