Horde Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/horde/ Sun, 26 Feb 2023 09:11:55 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Horde Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/horde/ 32 32 CVE-2008-7218 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7218/ Sun, 26 Feb 2023 09:11:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7218/ Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2 before 2.2-RC2; Kronolith H3 2.1 before 2.1.7 and H3 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and 2.2 before 2.2-RC2; Horde […]

The post CVE-2008-7218 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2 before 2.2-RC2; Kronolith H3 2.1 before 2.1.7 and H3 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and 2.2 before 2.2-RC2; Horde Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 has unknown impact and attack vectors.

The post CVE-2008-7218 appeared first on CVE Vulnerability.

]]> CVE-2008-7219 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7219/ Sun, 26 Feb 2023 09:11:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7219/ Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not validate ownership when performing share […]

The post CVE-2008-7219 appeared first on CVE Vulnerability.

]]> Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not validate ownership when performing share changes, which has unknown impact and attack vectors.

The post CVE-2008-7219 appeared first on CVE Vulnerability.

]]> CVE-2008-6746 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6746/ Sun, 26 Feb 2023 09:11:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6746/ Cross-site scripting (XSS) vulnerability in the contact display view in Turba Contact Manager H3 before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the contact name.

The post CVE-2008-6746 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability in the contact display view in Turba Contact Manager H3 before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the contact name.

The post CVE-2008-6746 appeared first on CVE Vulnerability.

]]> CVE-2007-1473 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-1473/ Sun, 26 Feb 2023 09:05:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-1473/ Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login page contains a language selection box, allows remote attackers to inject arbitrary web script or HTML via the new_lang parameter to login.php.

The post CVE-2007-1473 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login page contains a language selection box, allows remote attackers to inject arbitrary web script or HTML via the new_lang parameter to login.php.

The post CVE-2007-1473 appeared first on CVE Vulnerability.

]]> CVE-2007-1474 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-1474/ Sun, 26 Feb 2023 09:05:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-1474/ Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files and possibly gain privileges via multiple space-delimited pathnames.

The post CVE-2007-1474 appeared first on CVE Vulnerability.

]]> Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files and possibly gain privileges via multiple space-delimited pathnames.

The post CVE-2007-1474 appeared first on CVE Vulnerability.

]]>