Vulnerabilities for Horde groupware (...) - CXSECURITY.COM

Vulnerabilities for 'Horde groupware'

2009-03-17

CVE-2009-0932

CWE-22

Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Horde_Image driver name.

CVE-2009-0931

CWE-79

Cross-site scripting (XSS) vulnerability in the tag cloud search script (horde/services/portal/cloud_search.php) in Horde before 3.2.4 and 3.3.3, and Horde Groupware before 1.1.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

>>> Vendor: Debian 97 Products

Internet message

Toolchain-source

Kernel-patch-vserver

Libmail-audit-perl

Apt-listchanges

Initramfs-tools

Horde groupware

Texlive-extra-utils

Advanced package tool

Exuberant ctags

Unattended-upgrades

Xbindkeys-config

Postgresql-common

Debian-lan-config

Copyright 2024, cxsecurity.com