| Package | Affected versions | Patched versions |
|---|---|---|
| horde application framework | = 5.0.0= 5.0.1= 5.0.2= 5.0.3= 5.0.4≤ 5.1.0 |
The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via a crafted serialized object in the _formvars form.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free