Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

horde kronolith vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2006-6175
Directory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 prior to 2.0.7 and 2.1.x prior to 2.1.4 allows remote malicious users to include arbitrary files and execute PHP code via a .. (dot dot) sequence in the view parameter.
Horde Kronolith 2.0.4Horde Kronolith 2.0.5Horde Kronolith 2.0.2Horde Kronolith 2.0.3Horde Kronolith 2.1.3Horde Kronolith 2.0.6Horde Kronolith 2.1Horde Kronolith 2.0.1Horde Kronolith 2.1.1Horde Kronolith 2.1.2
4.3
CVSSv2
CVE-2012-6620
Multiple cross-site scripting (XSS) vulnerabilities in the (1) tasks and (2) search views in Horde Kronolith H4 prior to 3.0.17 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Horde Kronolith H4 3.0.15Horde Kronolith H4 3.0.14Horde Kronolith H4 3.0.7Horde Kronolith H4 3.0.6Horde Kronolith H4 3.0.5Horde Kronolith H4 3.0Horde Kronolith H4 3.0.11Horde Kronolith H4 3.0.10Horde Kronolith H4 3.0.2Horde Kronolith H4 3.0.1Horde Kronolith H4Horde Kronolith H4 3.0.9Horde Kronolith H4 3.0.8Horde Kronolith H4 3.0.13Horde Kronolith H4 3.0.12Horde Kronolith H4 3.0.4Horde Kronolith H4 3.0.3
3.5
CVSSv2
CVE-2005-4189
Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith H3 prior to 2.0.6 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Calendar name field when creating calendars, (2) event title field when deleting events, the (3) Category a...
Horde Kronolith H3 2.0.2Horde Kronolith H3 2.0.2 Rc1Horde Kronolith H3 2.0 BetaHorde Kronolith H3 2.0 Rc1Horde Kronolith H3 2.0Horde Kronolith H3 2.0.1Horde Kronolith H3 2.0.5Horde Kronolith H3 2.0 AlphaHorde Kronolith H3 2.0.3Horde Kronolith H3 2.0.3 Rc1Horde Kronolith H3 2.0 Rc2Horde Kronolith H3 2.0 Rc3Horde Kronolith H3 2.0.4Horde Kronolith H3 2.0.4 Rc1
4.3
CVSSv2
CVE-2012-5566
Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4 prior to 3.0.17, as used in Horde Groupware Webmail Edition prior to 4.0.8, allow remote malicious users to inject arbitrary web script or HTML via the (1) tasks view or (2) search view...
Horde Kronolith H4 3.0.11Horde Kronolith H4 3.0.12Horde Kronolith H4 3.0.13Horde Kronolith H4 3.0.14Horde Kronolith H4 3.0Horde Kronolith H4 3.0.1Horde Kronolith H4Horde Kronolith H4 3.0.3Horde Kronolith H4 3.0.8Horde Kronolith H4 3.0.4Horde Kronolith H4 3.0.5Horde Kronolith H4 3.0.6Horde Kronolith H4 3.0.7Horde Kronolith H4 3.0.10Horde Kronolith H4 3.0.15Horde Kronolith H4 3.0.2Horde Kronolith H4 3.0.9Horde Groupware 4.0.6Horde Groupware 4.0.5Horde Groupware 4.0.4Horde Groupware 4.0.3Horde Groupware 4.0.1
4.3
CVSSv2
CVE-2012-5567
Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4 prior to 3.0.18, as used in Horde Groupware Webmail Edition prior to 4.0.9, allow remote malicious users to inject arbitrary web script or HTML via crafted event location parameters in ...
Horde Groupware 4.0Horde Groupware 4.0.3Horde Groupware 4.0.1Horde GroupwareHorde Groupware 4.0.7Horde Groupware 4.0.6Horde Groupware 4.0.5Horde Groupware 4.0.4Horde Groupware 4.0.2Horde Kronolith H4 3.0.16Horde Kronolith H4Horde Kronolith H4 3.0.2Horde Kronolith H4 3.0.3Horde Kronolith H4 3.0.4Horde Kronolith H4 3.0Horde Kronolith H4 3.0.13Horde Kronolith H4 3.0.15Horde Kronolith H4 3.0.6Horde Kronolith H4 3.0.8Horde Kronolith H4 3.0.1Horde Kronolith H4 3.0.10Horde Kronolith H4 3.0.11
10
CVSSv2
CVE-2008-7219
Horde Kronolith H3 2.1 prior to 2.1.7 and 2.2 prior to 2.2-RC2; Nag H3 2.1 prior to 2.1.4 and 2.2 prior to 2.2-RC2; Mnemo H3 2.1 prior to 2.1.2 and H3 2.2 prior to 2.2-RC2; Groupware 1.0 prior to 1.0.3 and 1.1 prior to 1.1-RC2; and Groupware Webmail Edition 1.0 prior to 1.0.4 and...
Horde Kronolith H3 2.1.3Horde Kronolith H3 2.1.6Horde Nag H3 2.1Horde Groupware 1.0Horde Groupware 1.0.2Horde Nag H3 2.1.2Horde Nag H3 2.1.3Horde Nag H3 2.2Horde Mnemo H3 2.1Horde Kronolith H3 2.1.4Horde Kronolith H3 2.1Horde Kronolith H3 2.1.2Horde Kronolith H3 2.1.5Horde Groupware 1.1Horde Mnemo H3 2.1.1Horde Groupware Webmail Edition 1.1Horde Groupware Webmail Edition 1.0Horde Groupware Webmail Edition 1.0.2Horde Kronolith H3 2.1.1Horde Kronolith H3 2.2Horde Nag H3 2.1.1Horde Mnemo H3 2.2
10
CVSSv2
CVE-2008-7218
Unspecified vulnerability in the Horde API in Horde 3.1 prior to 3.1.6 and 3.2 prior to 3.2 prior to 3.2-RC2; Turba H3 2.1 prior to 2.1.6 and 2.2 prior to 2.2-RC2; Kronolith H3 2.1 prior to 2.1.7 and H3 2.2 prior to 2.2-RC2; Nag H3 2.1 prior to 2.1.4 and 2.2 prior to 2.2-RC2; Mne...
Horde Kronolith H3 2.1.1Horde Kronolith H3 2.1Horde Kronolith H3 2.1.2Horde Turba H3 2.1.1Horde Turba H3 2.1Horde Nag H3 2.1.2Horde Nag H3 2.1.3Horde Groupware 1.1Horde Horde 3.1.1Horde Horde 3.1.2Horde Kronolith H3 2.1.5Horde Kronolith H3 2.1.6Horde Turba H3 2.1.4Horde Turba H3 2.2Horde Mnemo H3 2.1.1Horde Mnemo H3 2.2Horde Groupware Webmail Edition 1.1Horde Horde 3.1.5Horde Groupware Webmail Edition 1.0Horde Horde 3.1Horde Kronolith H3 2.1.3Horde Kronolith H3 2.1.4
4.3
CVSSv2
CVE-2008-2783
Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow remote malicious users to inject arbitrary web script or HTML via the timestamp parameter to (1) week.php, (2) workweek.php, and (3) day.php; and (4) the horde p...
Horde GroupwareHorde Groupware Webmail EditionHorde Kronolith
4.3
CVSSv2
CVE-2005-1314
Cross-site scripting (XSS) vulnerability in Horde Kronolith module prior to 1.1.4 allows remote malicious users to inject arbitrary web script or HTML via the parent's frame page title.
Horde Kronolith 1.1.3
3.5
CVSSv2
CVE-2017-16906
In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a "Calendar -> New Event" action.
Horde Groupware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22120CVE-2024-35921CVE-2024-35874brute forceCVE-2024-36080unprivilegedCVE-2024-35917IDORCVE-2024-4947
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook