Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
horde horde 3.1.1 vulnerabilities and exploits
(subscribe to this query)
435
VMScore
CVE-2008-3824
Cross-site scripting (XSS) vulnerability in (1) Text_Filter/Filter/xss.php in Horde 3.1.x prior to 3.1.9 and 3.2.x prior to 3.2.2 and (2) externalinput.php in Popoon r22196 and previous versions allows remote malicious users to inject arbitrary web script or HTML by using / (slas...
Horde Horde 3.2
Horde Horde 3.1.4
Horde Horde 3.1.6
Popoon Popoon
Horde Horde 3.1.7
Horde Horde 3.1.5
Horde Horde 3.1.1
Horde Horde 3.1.2
Horde Horde 3.1.8
Horde Horde 3.2.1
Horde Horde 3.1.3
1 EDB exploit
383
VMScore
CVE-2006-3548
Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 up to and including 3.0.10 and 3.1.0 up to and including 3.1.1 allow remote malicious users to inject arbitrary web script or HTML via a (1) javascript URI or an external (2) http, (3) https,...
Horde Horde 3.0.6
Horde Horde 3.0
Horde Horde 3.0.3
Horde Horde 3.1.1
Horde Horde 3.0.4
Horde Horde 3.1
Horde Horde 3.0.1
Horde Horde 3.0.4 Rc2
Horde Horde 3.0.8
Horde Horde 3.0.9
Horde Horde 3.0.2
Horde Horde 3.0.4 Rc1
Horde Horde 3.0.7
445
VMScore
CVE-2006-3549
services/go.php in Horde Application Framework 3.0.0 up to and including 3.0.10 and 3.1.0 up to and including 3.1.1 does not properly restrict its image proxy capability, which allows remote malicious users to perform "Web tunneling" attacks and use the server as a prox...
Horde Horde Application Framework 3.0.0
Horde Horde Application Framework 3.0.4
Horde Horde Application Framework 3.1.0
Horde Horde Application Framework 3.0.5
Horde Horde Application Framework 3.0.10
Horde Horde Application Framework 3.0.1
Horde Horde Application Framework 3.1.1
Horde Horde Application Framework 3.0.8
Horde Horde Application Framework 3.0.3
Horde Horde Application Framework 3.0.6
Horde Horde Application Framework 3.0.9
Horde Horde Application Framework 3.0.7
Horde Horde Application Framework 3.0.2
383
VMScore
CVE-2006-4255
Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 prior to 4.1.3 allows remote malicious users to include arbitrary web script or HTML via multiple unspecified vectors related to folder names, as injected into the vfolder_label form field in the IMP...
Horde Imp 2.2.7
Horde Imp 2.2.5
Horde Imp 4.0
Horde Horde 3.0.6
Horde Imp 3.1
Horde Imp 3.2.4
Horde Imp 3.1.2
Horde Imp 2.2.1
Horde Imp 3.2.2
Horde Imp 2.2.2
Horde Imp 4.0.2
Horde Imp 2.2.4
Horde Imp 2.0
Horde Horde 3.0
Horde Horde 3.0.3
Horde Horde 3.1.1
Horde Horde 3.0.4
Horde Imp 2.2.6
Horde Horde 3.1
Horde Horde 3.0.1
Horde Imp 3.2.3
Horde Horde 3.0.4 Rc2
605
VMScore
CVE-2006-2195
Cross-site scripting (XSS) vulnerability in horde 3 (horde3) prior to 3.1.1 allows remote malicious users to inject arbitrary web script or HTML via (1) templates/problem/problem.inc and (2) test.php.
Horde Horde 3.0.6
Horde Horde 3.0
Horde Horde 3.0.3
Horde Horde
Horde Horde 3.0.4
Horde Horde 3.0.1
Horde Horde 3.0.4 Rc2
Horde Horde 3.0.8
Horde Horde 3.0.2
Horde Horde 3.0.4 Rc1
Horde Horde 3.0.7
383
VMScore
CVE-2006-4256
index.php in Horde Application Framework prior to 3.1.2 allows remote malicious users to include web pages from other sites, which could be useful for phishing attacks, via a URL in the url parameter, aka "cross-site referencing." NOTE: some sources have referred to thi...
Horde Application Framework 3.0.2
Horde Application Framework 3.0.8
Horde Application Framework 3.0
Horde Application Framework 3.0.4 Rc1
Horde Application Framework 3.0.7
Horde Application Framework 3.0.4
Horde Application Framework 3.1
Horde Application Framework 3.0.1
Horde Application Framework 3.0.6
Horde Application Framework 3.0.3
Horde Application Framework 3.0.4 Rc2
Horde Application Framework 3.1.1
Horde Application Framework 3.0.9
435
VMScore
CVE-2007-1473
Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework prior to 3.1.4 RC1, when the login page contains a language selection box, allows remote malicious users to inject arbitrary web script or HTML via the new_lang parameter to login.php.
Horde Horde Application Framework 1.2.3
Horde Horde Application Framework 2.0
Horde Horde Application Framework 1.2.4
Horde Horde Application Framework 3.0.0
Horde Horde Application Framework 2.2.5
Horde Horde Application Framework 3.0.4
Horde Horde Application Framework 3.1.0
Horde Horde Application Framework 3.1.2
Horde Horde Application Framework 2.2.9
Horde Horde Application Framework 2.2.3
Horde Horde Application Framework 1.2.1
Horde Horde Application Framework 1.3.3
Horde Horde Application Framework 3.0.5
Horde Horde Application Framework 3.0.10
Horde Horde Application Framework 3.0.1
Horde Horde Application Framework 1.2.6
Horde Horde Application Framework 2.2.8
Horde Horde Application Framework 2.2.6
Horde Horde Application Framework 1.2.0
Horde Horde Application Framework 1.2.7
Horde Horde Application Framework 3.1.1
Horde Horde Application Framework 3.0.8
1 EDB exploit
505
VMScore
CVE-2006-1260
Horde Application Framework 3.0.9 allows remote malicious users to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check.
Horde Horde 2.2.7
Horde Horde 3.0.6
Horde Horde 1.2.8
Horde Horde 2.2.3
Horde Horde 1.2
Horde Horde 1.2.1
Horde Horde 2.2.1
Horde Horde 1.2.6
Horde Horde 3.0
Horde Horde 2.2.4
Horde Horde 3.0.3
Horde Horde 2.0
Horde Horde 3.0.4
Horde Horde 1.2.5
Horde Horde 3.0.1
Horde Horde 3.0.4 Rc2
Horde Horde 1.2.3
Horde Horde 2.2.9
Horde Horde 1.2.2
Horde Horde 2.2.8
Horde Horde 3.0.8
Horde Horde 3.0.9
1 EDB exploit
890
VMScore
CVE-2008-7218
Unspecified vulnerability in the Horde API in Horde 3.1 prior to 3.1.6 and 3.2 prior to 3.2 prior to 3.2-RC2; Turba H3 2.1 prior to 2.1.6 and 2.2 prior to 2.2-RC2; Kronolith H3 2.1 prior to 2.1.7 and H3 2.2 prior to 2.2-RC2; Nag H3 2.1 prior to 2.1.4 and 2.2 prior to 2.2-RC2; Mne...
Horde Nag H3 2.1.3
Horde Horde 3.2
Horde Groupware 1.1
Horde Horde 3.1.4
Horde Groupware Webmail Edition 1.1
Horde Nag H3 2.1.2
Horde Groupware 1.0
Horde Turba H3 2.2
Horde Nag H3 2.1.1
Horde Turba H3 2.1.1
Horde Nag H3 2.2
Horde Turba H3 2.1.4
Horde Horde 3.1.5
Horde Turba H3 2.1.5
Horde Kronolith H3 2.1.5
Horde Groupware 1.0.2
Horde Groupware Webmail Edition 1.0.3
Horde Mnemo H3 2.1.1
Horde Mnemo H3 2.1
Horde Kronolith H3 2.1.2
Horde Kronolith H3 2.1.4
Horde Groupware 1.0.1
383
VMScore
CVE-2008-4182
Cross-site scripting (XSS) vulnerability in imp/test.php in Horde Turba Contact Manager H3 2.2.1 and other versions prior to 2.3.1, and possibly other Horde Project products, allows remote malicious users to inject arbitrary web script or HTML via the User field in an IMAP sessio...
Horde Turba Contact Manager H3 3.2.2
Horde Turba Contact Manager H3 2.2.1
Horde Turba Contact Manager H3 3.1.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5841
file upload
man-in-the-middle
arbitrary
CVE-2024-27801
CVE-2024-28020
CVE-2024-30080
CVE-2024-30069
CVE-2024-5843
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »