CVE-2008-3330: Debian Horde

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in services/obrowser/index.php in Horde 3.2 and Turba 2.2 allows remote attackers to inject arbitrary web script or HTML via the contact name.

Affected products

• Debian Horde: version 3.2 only
• Debian Turba: version 2.2 only

Published 2008-07-27. Last modified 2026-06-16.