{"id":"CVE-2004-2741","state":"PUBLISHED","title":"Cross-site scripting (XSS) vulnerability in the \"help window\" (help.php) in Horde Application Framework 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the","description":"Cross-site scripting (XSS) vulnerability in the \"help window\" (help.php) in Horde Application Framework 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) module, (2) topic, or (3) module parameters.","publishedAt":"2007-10-09T10:00:00.000Z","updatedAt":"2024-08-08T01:36:25.317Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://www.osvdb.org/11164","http://www.securityfocus.com/bid/11546","http://secunia.com/advisories/12992","http://lists.horde.org/archives/announce/2004/000107.html","https://exchange.xforce.ibmcloud.com/vulnerabilities/17881","http://cvs.horde.org/diff.php/horde/templates/help/index.inc?r1=1.9.2.4&r2=1.9.2.5&ty=u","http://securitytracker.com/id?1011959"],"weaknesses":[],"ingestedAt":"2026-10-29T19:27:06.149Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2004/2xxx/CVE-2004-2741.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2004-2741","state":"PUBLISHED","datePublished":"2007-10-09T10:00:00.000Z","dateUpdated":"2024-08-08T01:36:25.317Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2007-10-08T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the \"help window\" (help.php) in Horde Application Framework 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) module, (2) topic, or (3) module parameters."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://www.osvdb.org/11164","name":"11164","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://www.securityfocus.com/bid/11546","name":"11546","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://secunia.com/advisories/12992","name":"12992","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://lists.horde.org/archives/announce/2004/000107.html","name":"[horde-announce] 20041026 Horde 2.2.7 (final)","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17881","name":"horde-help-window-xss(17881)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://cvs.horde.org/diff.php/horde/templates/help/index.inc?r1=1.9.2.4&r2=1.9.2.5&ty=u","tags":["x_refsource_CONFIRM"]},{"url":"http://securitytracker.com/id?1011959","name":"1011959","tags":["vdb-entry","x_refsource_SECTRACK"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2004-10-27T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2004-2741","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in the \"help window\" (help.php) in Horde Application Framework 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) module, (2) topic, or (3) module parameters."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"11164","refsource":"OSVDB","url":"http://www.osvdb.org/11164"},{"name":"11546","refsource":"BID","url":"http://www.securityfocus.com/bid/11546"},{"name":"12992","refsource":"SECUNIA","url":"http://secunia.com/advisories/12992"},{"name":"[horde-announce] 20041026 Horde 2.2.7 (final)","refsource":"MLIST","url":"http://lists.horde.org/archives/announce/2004/000107.html"},{"name":"horde-help-window-xss(17881)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17881"},{"name":"http://cvs.horde.org/diff.php/horde/templates/help/index.inc?r1=1.9.2.4&r2=1.9.2.5&ty=u","refsource":"CONFIRM","url":"http://cvs.horde.org/diff.php/horde/templates/help/index.inc?r1=1.9.2.4&r2=1.9.2.5&ty=u"},{"name":"1011959","refsource":"SECTRACK","url":"http://securitytracker.com/id?1011959"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.osvdb.org/11164","name":"11164","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.securityfocus.com/bid/11546","name":"11546","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/12992","name":"12992","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://lists.horde.org/archives/announce/2004/000107.html","name":"[horde-announce] 20041026 Horde 2.2.7 (final)","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17881","name":"horde-help-window-xss(17881)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://cvs.horde.org/diff.php/horde/templates/help/index.inc?r1=1.9.2.4&r2=1.9.2.5&ty=u","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://securitytracker.com/id?1011959","name":"1011959","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-08T01:36:25.317Z"}}]}}}