CVE-2012-5567

Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4 before 3.0.18, as used in Horde Groupware Webmail Edition before 4.0.9, allow remote attackers to inject arbitrary web script or HTML via crafted event location parameters in the (1) month, (2) monthlist, or (3) prevmonthlist fields, related to portal blocks.

• CWE-79

• http://git.horde.org/horde-git/-/commit/d865c564beb6e98532880aa51a04a79f3311cd1e
• http://lists.horde.org/archives/announce/2012/000836.html
• http://lists.opensuse.org/opensuse-updates/2012-12/msg00019.html
• http://secunia.com/advisories/51233Vendor Advisory
• http://secunia.com/advisories/51469Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/11/23/3
• http://www.openwall.com/lists/oss-security/2012/11/23/7
• http://www.osvdb.org/87345
• http://www.securityfocus.com/bid/56541
• https://bugzilla.redhat.com/show_bug.cgi?id=879684
• https://github.com/horde/horde/blob/d3dda2d47fad7eb128a0091e732cded0c2601009/kronolith/docs/CHANGESVendor Advisory
• http://git.horde.org/horde-git/-/commit/d865c564beb6e98532880aa51a04a79f3311cd1e
• http://lists.horde.org/archives/announce/2012/000836.html
• http://lists.opensuse.org/opensuse-updates/2012-12/msg00019.html
• http://secunia.com/advisories/51233Vendor Advisory
• http://secunia.com/advisories/51469Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/11/23/3
• http://www.openwall.com/lists/oss-security/2012/11/23/7
• http://www.osvdb.org/87345
• http://www.securityfocus.com/bid/56541
• https://bugzilla.redhat.com/show_bug.cgi?id=879684
• https://github.com/horde/horde/blob/d3dda2d47fad7eb128a0091e732cded0c2601009/kronolith/docs/CHANGESVendor Advisory

Published

Apr 5, 2014

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-5561script/katello-generate-passphrase in Katello 1.1 uses world…
• CVE-2012-5562A flaw was found in rhn-proxy. This vulnerability may allow …8.6
• CVE-2012-5563OpenStack Keystone, as used in OpenStack Folsom 2012.2, does…
• CVE-2012-5564android-tools 4.1.1 in Android Debug Bridge (ADB) allows loc…
• CVE-2012-5565Cross-site scripting (XSS) vulnerability in js/compose-dimp.…
• CVE-2012-5566Multiple cross-site scripting (XSS) vulnerabilities in Horde…
• CVE-2012-5568Apache Tomcat through 7.0.x allows remote attackers to cause…
• CVE-2012-5569Multiple cross-site scripting (XSS) vulnerabilities in the B…
• CVE-2012-5570The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal a…4.3
• CVE-2012-5571A flaw was found in OpenStack Keystone. This vulnerability a…5.4
• CVE-2012-5572CRLF injection vulnerability in the cookie method (lib/Dance…
• CVE-2012-5573The connection_edge_process_relay_cell function in or/relay.…