This host is running Horde Gollem and is prone to cross site scripting vulnerability.

Successful exploitation could allow remote attackers to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Impact Level: Application

Upgrade to Horde Gollem version 1.1.2 or later, For updates refer to http://www.horde.org/download/app/?app=gollem

The flaw is caused by improper validation of user-supplied input via the 'file' parameter to 'view.php', which allows attackers to execute arbitrary HTML and script code on the web server.

Horde Gollem versions before 1.1.2

• http://bugs.horde.org/ticket/9191
• http://osvdb.org/68262
• http://secunia.com/advisories/41624
• http://www.vupen.com/english/advisories/2010/2523

---

Updated on 2015-03-25