horde_application_framework Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/horde_application_framework/ Sun, 26 Feb 2023 09:05:53 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png horde_application_framework Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/horde_application_framework/ 32 32 CVE-2007-1473 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-1473/ Sun, 26 Feb 2023 09:05:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-1473/ Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login page contains a language selection box, allows remote attackers to inject arbitrary web script or HTML via the new_lang parameter to login.php.

The post CVE-2007-1473 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login page contains a language selection box, allows remote attackers to inject arbitrary web script or HTML via the new_lang parameter to login.php.

The post CVE-2007-1473 appeared first on CVE Vulnerability.

]]> CVE-2007-1474 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-1474/ Sun, 26 Feb 2023 09:05:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-1474/ Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files and possibly gain privileges via multiple space-delimited pathnames.

The post CVE-2007-1474 appeared first on CVE Vulnerability.

]]> Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files and possibly gain privileges via multiple space-delimited pathnames.

The post CVE-2007-1474 appeared first on CVE Vulnerability.

]]>