CVE		CVE-2008-3330
Status		Candidate
Description		Cross-site scripting (XSS) vulnerability in services/obrowser/index.php in Horde 3.2 and Turba 2.2 allows remote attackers to inject arbitrary web script or HTML via the contact name.
Phase		Assigned (27.07.2008)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3330
References		BID : 29745
		CONFIRM : http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=4...
		SECTRACK : 1020566
		SECTRACK : 1020567
		SECUNIA : 34609
		XF : horde-turba-index-xss(44198)
SecurityVulns:		Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)