| Package | Affected versions | Patched versions |
|---|---|---|
| groupware | = 1.2.10 | |
| horde | = 3.3.12 |
Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2012, contains an externally introduced modification (Trojan Horse) in templates/javascript/open_calendar.js, which allows remote attackers to execute arbitrary PHP code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free