CVE		CVE-2009-2360
Статус		Candidate
Описание		Cross-site scripting (XSS) vulnerability in passwd/main.php in the Passwd module before 3.1.1 for Horde allows remote attackers to inject arbitrary web script or HTML via the backend parameter.
Важность		Medium
CVSS score		4,3
CVSS vector		(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Phase		Assigned (08.07.2009)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-2360
References		BID : 35573
		CONFIRM : http://bugs.horde.org/ticket/8398
		DEBIAN : DSA-1829
		MLIST : [announce] 20090705 Passwd H3 (3.1.1) (final)
		SECUNIA : 35720
		VUPEN : ADV-2009-1784
		XF : passwd-main-xss(51542)
SecurityVulns:		Ежедневная сводка уязвимостей безопасности в Web-приложениях (PHP, ASP, JSP, CGI, Perl)