Horde Kronolith vulnerabilities

2 vulnerabilities

Known vulnerabilities in Horde Kronolith, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2005-1314hordekronolith
EPSS score
1.23%
Cross-site scripting (XSS) vulnerability in Horde Kronolith module before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.7.5CVE-2006-6175hordekronolith
EPSS score
2.26%
Directory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 before 2.0.7 and 2.1.x before 2.1.4 allows remote attackers to include arbitrary files and execute PHP code via a .. (dot dot) sequence in the view parameter.