Horde

Groupware

45 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2008-1974

Exploit
  • EPSS 2.15%
  • Veröffentlicht 27.04.2008 19:05:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and Groupware 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the url parameter.

6

CVE-2008-1284

  • EPSS 1.31%
  • Veröffentlicht 11.03.2008 00:44:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, when running with certain configurations, allows remote authenticated users to read and execute arbitrary files via ".." sequences a...

4.9

CVE-2008-0807

  • EPSS 0.56%
  • Veröffentlicht 19.02.2008 01:00:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

lib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2-RC3, as used in products such as Horde Groupware before 1.0.4 and Horde Groupware Webmail Edition before 1.0.5, does not properly check access rights, w...

4.3

CVE-2007-1679

  • EPSS 0.47%
  • Veröffentlicht 26.03.2007 23:19:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware Webmail 1.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in (1) imp/search.php and (2) ingo/rule.php. NOTE: this issue has been ...

5.1

CVE-2007-0579

  • EPSS 1.36%
  • Veröffentlicht 30.01.2007 17:28:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in the calendar component in Horde Groupware Webmail Edition before 1.0, and Groupware before 1.0, allows remote attackers to include certain files via unspecified vectors. NOTE: some of these details are obtained from thir...