Horde

Groupware

45 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2008-1974

Exploit
  • EPSS 2.15%
  • Published 27.04.2008 19:05:00
  • Last modified 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and Groupware 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the url parameter.

6

CVE-2008-1284

  • EPSS 1.31%
  • Published 11.03.2008 00:44:00
  • Last modified 09.04.2025 00:30:58

Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, when running with certain configurations, allows remote authenticated users to read and execute arbitrary files via ".." sequences a...

4.9

CVE-2008-0807

  • EPSS 0.56%
  • Published 19.02.2008 01:00:00
  • Last modified 09.04.2025 00:30:58

lib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2-RC3, as used in products such as Horde Groupware before 1.0.4 and Horde Groupware Webmail Edition before 1.0.5, does not properly check access rights, w...

4.3

CVE-2007-1679

  • EPSS 0.47%
  • Published 26.03.2007 23:19:00
  • Last modified 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware Webmail 1.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in (1) imp/search.php and (2) ingo/rule.php. NOTE: this issue has been ...

5.1

CVE-2007-0579

  • EPSS 1.36%
  • Published 30.01.2007 17:28:00
  • Last modified 09.04.2025 00:30:58

Unspecified vulnerability in the calendar component in Horde Groupware Webmail Edition before 1.0, and Groupware before 1.0, allows remote attackers to include certain files via unspecified vectors. NOTE: some of these details are obtained from thir...