Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
horde application framework 3.2.2 vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2008-5917
Cross-site scripting (XSS) vulnerability in the XSS filter (framework/Text_Filter/Filter/xss.php) in Horde Application Framework 3.2.2 and 3.3, when Internet Explorer is being used, allows remote malicious users to inject arbitrary web script or HTML via unknown vectors related t...
Horde Application Framework 3.2.2
Horde Application Framework 3.3
383
VMScore
CVE-2009-3236
The form library in Horde Application Framework 3.2 prior to 3.2.5 and 3.3 prior to 3.3.5; Groupware 1.1 prior to 1.1.6 and 1.2 prior to 1.2.4; and Groupware Webmail Edition 1.1 prior to 1.1.6 and 1.2 prior to 1.2.4; reuses temporary filenames during the upload process which allo...
Horde Groupware 1.1
Horde Application Framework 3.2.4
Horde Groupware 1.2.2
Horde Groupware 1.1.5
Horde Application Framework 3.2.1
Horde Application Framework 3.3.2
Horde Groupware 1.2.1
Horde Application Framework 3.2.2
Horde Groupware 1.1.1
Horde Application Framework 3.3.3
Horde Groupware 1.1.3
Horde Application Framework 3.3.4
Horde Application Framework 3.2.3
Horde Application Framework 3.3.1
Horde Application Framework 3.2
Horde Groupware 1.2
Horde Groupware 1.1.4
Horde Application Framework 3.3
Horde Groupware 1.1.2
Horde Groupware 1.2.3
605
VMScore
CVE-2010-3694
Cross-site request forgery (CSRF) vulnerability in the Horde Application Framework prior to 3.3.9 allows remote malicious users to hijack the authentication of unspecified victims for requests to a preference form.
Horde Horde Application Framework 3.0.11
Horde Horde Application Framework 2.0
Horde Horde Application Framework 3.2.3
Horde Horde Application Framework 3.0
Horde Horde Application Framework 3.3.4
Horde Horde Application Framework 3.2
Horde Horde Application Framework 3.1.4
Horde Horde Application Framework 2.2.5
Horde Horde Application Framework 3.1
Horde Horde Application Framework 3.0.4
Horde Horde Application Framework 3.0.6
Horde Horde Application Framework 3.1.9
Horde Horde Application Framework 3.1.8
Horde Horde Application Framework 3.1.2
Horde Horde Application Framework 2.2.9
Horde Horde Application Framework 2.2.3
Horde Horde Application Framework 1.3.3
Horde Horde Application Framework 3.0.5
Horde Horde Application Framework 1.3.1
Horde Horde Application Framework 3.0.10
Horde Horde Application Framework 3.0.1
Horde Horde Application Framework 3.3.7
435
VMScore
CVE-2010-3077
Cross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application Framework prior to 3.3.9 allows remote malicious users to inject arbitrary web script or HTML via the subdir parameter.
Horde Horde Application Framework 3.0.11
Horde Horde Application Framework 2.0
Horde Horde Application Framework 3.2.3
Horde Horde Application Framework 3.0
Horde Horde Application Framework 3.3.4
Horde Horde Application Framework 3.2
Horde Horde Application Framework 3.1.4
Horde Horde Application Framework 2.2.5
Horde Horde Application Framework 3.1
Horde Horde Application Framework 3.0.4
Horde Horde Application Framework 3.0.6
Horde Horde Application Framework 3.1.9
Horde Horde Application Framework 3.1.8
Horde Horde Application Framework 3.1.2
Horde Horde Application Framework 2.2.9
Horde Horde Application Framework 2.2.3
Horde Horde Application Framework 1.3.3
Horde Horde Application Framework 3.0.5
Horde Horde Application Framework 1.3.1
Horde Horde Application Framework 3.0.10
Horde Horde Application Framework 3.0.1
Horde Horde Application Framework 3.3.7
1 EDB exploit
383
VMScore
CVE-2009-4363
Text_Filter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework prior to 3.3.6, Horde Groupware prior to 1.2.5, and Horde Groupware Webmail Edition prior to 1.2.5 does not properly handle data: URIs, which allows remote malicious users to conduct cross-site scripting (XS...
Horde Application Framework 3.0.2
Horde Groupware 1.1
Horde Application Framework 3.2.4
Horde Application Framework 2.1
Horde Groupware 1.0
Horde Groupware 1.2.2
Horde Application Framework 2.2.4 Rc1
Horde Groupware 1.1.5
Horde Application Framework 3.2.1
Horde Application Framework
Horde Application Framework 2.0
Horde Application Framework 3.3.2
Horde Application Framework 3.0.8
Horde Groupware 1.2.1
Horde Application Framework 3.0
Horde Groupware 1.0.2
Horde Application Framework 3.2.2
Horde Groupware
Horde Groupware 1.0.1
Horde Groupware 1.0.5
Horde Application Framework 2.2
Horde Groupware 1.1.1
450
VMScore
CVE-2009-3701
Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework prior to 3.3.6, Horde Groupware prior to 1.2.5, and Horde Groupware Webmail Edition prior to 1.2.5 allow remote malicious users to inject arbitrary web script or HTM...
Horde Application Framework 3.0.2
Horde Groupware 1.1
Horde Application Framework 3.2.4
Horde Application Framework 2.1
Horde Groupware 1.0
Horde Groupware 1.2.2
Horde Application Framework 2.2.4 Rc1
Horde Groupware 1.1.5
Horde Application Framework 3.2.1
Horde Application Framework
Horde Application Framework 2.0
Horde Application Framework 3.3.2
Horde Application Framework 3.0.8
Horde Groupware 1.2.1
Horde Application Framework 3.0
Horde Groupware 1.0.2
Horde Application Framework 3.2.2
Horde Groupware
Horde Groupware 1.0.1
Horde Groupware 1.0.5
Horde Application Framework 2.2
Horde Groupware 1.1.1
4 EDB exploits
383
VMScore
CVE-2009-3237
Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.2 prior to 3.2.5 and 3.3 prior to 3.3.5; Groupware 1.1 prior to 1.1.6 and 1.2 prior to 1.2.4; and Groupware Webmail Edition 1.1 prior to 1.1.6 and 1.2 prior to 1.2.4; allow remote malicious users...
Horde Horde Groupware 1.2.3
Horde Horde Application Framework 3.2.3
Horde Horde Groupware 1.1.3
Horde Horde Groupware 1.1.4
Horde Horde Application Framework 3.2
Horde Horde Groupware 1.1.2
Horde Horde Application Framework 3.3
Horde Horde Groupware 1.2
Horde Horde Groupware 1.2.1
Horde Horde Application Framework 3.3.2
Horde Horde Groupware 1.1.1
Horde Horde Application Framework 3.3.4
Horde Horde Application Framework 3.2.1
Horde Horde Application Framework 3.3.1
Horde Horde Application Framework 3.2.2
Horde Horde Groupware 1.1.5
Horde Horde Application Framework 3.2.4
Horde Horde Application Framework 3.3.3
Horde Horde Groupware 1.2.2
Horde Groupware 1.1
Horde Groupware 1.2.2
Horde Groupware 1.2.1
685
VMScore
CVE-2007-1474
Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files and possibly gain privileges via multiple space-delimited pathnames.
Horde Imp 2.2.7
Horde Imp 2.2.5
Horde Horde Application Framework 3.0.0
Horde Imp 3.1
Horde Horde Application Framework 3.0.4
Horde Imp 3.2.4
Horde Imp 3.1.2
Horde Imp 2.2.1
Horde Imp 3.2.2
Horde Imp 2.2.2
Horde Imp 2.2.4
Horde Imp 2.0
Horde Imp 2.2.6
Horde Imp 3.2.3
Horde Imp 3.2.5
Horde Imp 3.2.6
Horde Imp 2.2
Horde Imp 2.3
Horde Imp 3.2
Horde Imp 2.2.8
Horde Imp 2.2.3
Horde Horde Application Framework 3.1.3
1 EDB exploit
435
VMScore
CVE-2008-3824
Cross-site scripting (XSS) vulnerability in (1) Text_Filter/Filter/xss.php in Horde 3.1.x prior to 3.1.9 and 3.2.x prior to 3.2.2 and (2) externalinput.php in Popoon r22196 and previous versions allows remote malicious users to inject arbitrary web script or HTML by using / (slas...
Horde Horde 3.2
Horde Horde 3.1.4
Horde Horde 3.1.6
Popoon Popoon
Horde Horde 3.1.7
Horde Horde 3.1.5
Horde Horde 3.1.1
Horde Horde 3.1.2
Horde Horde 3.1.8
Horde Horde 3.2.1
Horde Horde 3.1.3
1 EDB exploit
646
VMScore
CVE-2009-0932
Directory traversal vulnerability in framework/Image/Image.php in Horde prior to 3.2.4 and 3.3.3 and Horde Groupware prior to 1.1.5 allows remote malicious users to include and execute arbitrary local files via directory traversal sequences in the Horde_Image driver name.
Debian Horde 3.3.2
Debian Horde 3.2
Debian Horde Groupware 1.1.3
Debian Horde 3.2.2
Debian Horde Groupware 1.1.1
Debian Horde 3.3.1
Debian Horde 3.2.3
Debian Horde 3.3
Debian Horde Groupware 1.1.2
Debian Horde Groupware 1.1.4
1 EDB exploit
2 Github repositories
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
deserialization
CVE-2024-4541
CVE-2024-3080
CVE-2024-4787
log injection
CVE-2024-5967
inject
CVE-2024-30078
CVE-2024-5899
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »