Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

horde groupware webmail edition 1.0.6 vulnerabilities and exploits

(subscribe to this query)
9
CVSSv2
CVE-2008-3650
Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and attack vectors related to "unescaped output," possibly cross-site scripting (XSS), in the (1) object browser and (2) contact view.
Horde Groupware Webmail Edition 1.0Horde Groupware Webmail Edition 1.0.1Horde Groupware Webmail Edition 1.0.4Horde Groupware Webmail Edition 1.0.5Horde Groupware Webmail Edition 1.0.6Horde Groupware Webmail Edition 1.0.7Horde Groupware Webmail Edition 1.1Horde Groupware Webmail Edition 1.0.2Horde Groupware Webmail Edition 1.0.3
4.3
CVSSv2
CVE-2012-0909
Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition prior to 4.0.6 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, related to email verification. NOTE: Some of these details are obtained from thir...
Horde Groupware Webmail Edition 4.0.2Horde Groupware Webmail Edition 4.0.1Horde Groupware Webmail Edition 4.0Horde Groupware Webmail Edition 1.2Horde Groupware Webmail Edition 1.1.6Horde Groupware Webmail Edition 1.1.5Horde Groupware Webmail Edition 1.1.4Horde Groupware Webmail Edition 1.0.4Horde Groupware Webmail Edition 1.0.3Horde Groupware Webmail Edition 1.0.2Horde Groupware Webmail Edition 1.0.1Horde Groupware Webmail Edition 1.2.7Horde Groupware Webmail Edition 1.2.6Horde Groupware Webmail Edition 1.2.5Horde Groupware Webmail Edition 1.2.4Horde Groupware Webmail Edition 1.2.3Horde Groupware Webmail Edition 1.1Horde Groupware Webmail EditionHorde Groupware Webmail Edition 4.0.3Horde Groupware Webmail Edition 1.2.9Horde Groupware Webmail Edition 1.2.1Horde Groupware Webmail Edition 1.1.2
4.3
CVSSv2
CVE-2008-1974
Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and Groupware 1.0.5 allows remote malicious users to inject arbitrary web script or HTML via the url parameter.
Horde Groupware 1.0.5Horde Groupware Webmail Edition 1.0.6
4.3
CVSSv2
CVE-2012-0791
Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP prior to 5.0.18 and Horde Groupware Webmail Edition prior to 4.0.6 allow remote malicious users to inject arbitrary web script or HTML via the (1) composeCache, (2) rtemode, or (3) filename_* parameters to the compo...
Horde Imp 2.2.7Horde Dynamic Imp 1.1Horde Imp 2.2.5Horde Imp 4.0Horde Dynamic Imp 1.1.6Horde Imp 4.1.3Horde Dynamic Imp 1.1.1Horde Dynamic Imp 5.0.4Horde Imp 4.1.6Horde Imp 5.0.3Horde Imp 3.1Horde Imp 5.0.2Horde Dynamic Imp 5.0.13Horde Imp 4.3.6Horde Dynamic Imp 1.0Horde Dynamic Imp 5.0.5Horde Imp 3.2.4Horde Imp 3.1.2Horde Imp 5.0Horde Imp 4.3.3Horde Imp 4.2Horde Dynamic Imp
6
CVSSv2
CVE-2008-1284
Directory traversal vulnerability in Horde 3.1.6, Groupware prior to 1.0.5, and Groupware Webmail Edition prior to 1.0.6, when running with certain configurations, allows remote authenticated users to read and execute arbitrary files via ".." sequences and a null byte i...
Horde Groupware Webmail EditionHorde Horde 3.1.6Horde Groupware
4.3
CVSSv2
CVE-2010-3693
Cross-site scripting (XSS) vulnerability in Horde Dynamic IMP (DIMP) prior to 1.1.5, and Horde Groupware Webmail Edition prior to 1.2.7, allows remote malicious users to inject arbitrary web script or HTML via vectors related to displaying mailbox names.
Horde Groupware 1.0.7Horde Groupware 1.1.4Horde Groupware 1.1.3Horde Groupware 1.2Horde Groupware 1.0Horde GroupwareHorde Groupware 1.1.6Horde Groupware 1.1Horde Groupware 1.0.1Horde Groupware 1.0.6Horde Groupware 1.2.2Horde Groupware 1.2.5Horde Groupware 1.0.4Horde Groupware 1.2.3Horde Groupware 1.1.5Horde Groupware 1.0.5Horde Groupware 1.1.2Horde Groupware 1.0.2Horde Groupware 1.0.3Horde Groupware 1.2.4Horde Groupware 1.0.8Horde Groupware 1.1.1
4.3
CVSSv2
CVE-2010-3695
Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP prior to 4.3.8, and Horde Groupware Webmail Edition prior to 1.2.7, allows remote malicious users to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_save action, related t...
Horde Imp 4.1.3Horde Imp 4.0.4Horde Imp 2.2.1Horde Imp 4.1.5Horde Imp 4.0.3Horde Imp 2.2.5Horde Imp 4.3.5Horde Imp 4.2.2Horde Imp 4.3Horde Imp 4.3.2Horde Imp 3.2.7Horde Imp 3.2Horde Imp 3.1.2Horde Imp 3.2.2Horde Imp 2.2.2Horde Imp 2.0Horde Imp 4.3.3Horde Imp 3.2.4Horde Imp 3.2.3Horde Imp 2.2.8Horde Imp 3.1Horde Imp 4.0.2
4.3
CVSSv2
CVE-2010-4778
Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP prior to 4.3.8, and Horde Groupware Webmail Edition prior to 1.2.7, allow remote malicious users to inject arbitrary web script or HTML via the (1) username (aka fmusername), (2) password (aka ...
Horde Imp 4.0.3Horde Imp 4.1.6Horde Imp 2.2.5Horde Imp 2.2.6Horde Imp 4.2.2Horde Imp 4.2Horde Imp 3.2.7Horde Imp 4.0Horde Imp 3.2Horde Imp 3.2.2Horde Imp 2.2Horde Imp 2.2.1Horde Imp 2.2.2Horde Imp 3.2.4Horde Imp 3.2.3Horde Imp 3.2.6Horde Imp 3.2.5Horde Imp 4.1.3Horde Imp 4.0.4Horde Imp 2.2.4Horde Imp 4.3.6Horde Imp 2.0
4.3
CVSSv2
CVE-2009-3701
Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework prior to 3.3.6, Horde Groupware prior to 1.2.5, and Horde Groupware Webmail Edition prior to 1.2.5 allow remote malicious users to inject arbitrary web script or HTM...
Horde Application Framework 3.3.4Horde Application Framework 2.1Horde Application Framework 2.1.3Horde Application Framework 3.0.4Horde Application Framework 3.0Horde Application Framework 3.0.9Horde Application Framework 3.2.1Horde Groupware 1.2.3Horde GroupwareHorde Groupware 1.0.1Horde Groupware 1.2Horde Groupware 1.1.5Horde Application Framework 2.2.4 Rc1Horde Application Framework 2.2.5Horde Application Framework 2.2.3Horde Application Framework 3.0.1Horde Application Framework 2.2.6Horde Application Framework 2.0Horde Application Framework 3.0.2Horde Application Framework 3.0.3Horde Application Framework 3.1Horde Application Framework 3.1.1
4.3
CVSSv2
CVE-2009-4363
Text_Filter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework prior to 3.3.6, Horde Groupware prior to 1.2.5, and Horde Groupware Webmail Edition prior to 1.2.5 does not properly handle data: URIs, which allows remote malicious users to conduct cross-site scripting (XS...
Horde Application Framework 2.2.4 Rc1Horde Application Framework 2.2.5Horde Application Framework 2.2.6Horde Application Framework 2.0Horde Application Framework 3.0.7Horde Application Framework 3.1Horde Application Framework 3.3.4Horde Application Framework 2.2.4Horde Application Framework 2.1Horde Application Framework 2.2Horde Application Framework 3.0Horde Application Framework 3.2.2Horde Application Framework 3.2.1Horde Application Framework 3.2Horde Groupware 1.2.3Horde Groupware 1.2Horde Groupware 1.1.2Horde Application FrameworkHorde Application Framework 2.1.3Horde Application Framework 2.2.1Horde Application Framework 3.3Horde Application Framework 3.0.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22460CVE-2024-4646CVE-2024-29212IMAPCVE-2023-36672CVE-2024-34547command injectionCVE-2024-4651stored XSS
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook