CVE-2017-16908

Description

References

• code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html · Exploit
• horde/kronolith commit 39f7400 · Patch
• lists.debian.org/debian-lts-announce/2020/08/msg00048.html

More vulnerabilities in groupware

• CVE-2025-41066MEDIUM 5.3Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid acc…
• CVE-2022-30287HIGH 8.0Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class…
• CVE-2021-26929MEDIUM 6.1An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). Th…
• CVE-2020-8034MEDIUM 6.1Gollem before 3.0.13, as used in Horde Groupware Webmail Edition 5.2.22 and other products, is affected by a reflected Cross-Site Scripting …
• CVE-2020-8035MEDIUM 6.1The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripting (XSS) vulnerabili…