CVE-2012-0909

MEDIO 4.3CVE-2012-0909 · Published 24/01/2012 · updated 16/06/2026

In breve

CVE-2012-0909 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda groupware webmail edition (horde).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.8%, superiore al 78.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
groupware webmail edition horde	`= 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.1= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.2= 1.2.1= 1.2.10= 1.2.2= 1.2.3= 1.2.4= 1.2.5= 1.2.6= 1.2.7= 1.2.8= 1.2.9= 4.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4≤ 4.0.5`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Horde_Form in Horde Groupware Webmail Edition before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to email verification. NOTE: Some of these details are obtained from third party information.

References

secunia.com/advisories/47592 · Vendor Advisory
horde.org/apps/webmail/docs/CHANGES
horde.org/apps/webmail/docs/RELEASE_NOTES
openwall.com/lists/oss-security/2012/01/22/2
securityfocus.com/bid/51586 · Exploit

Altre vulnerabilità di groupware webmail edition

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

groupware webmail edition

horde

= 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.1= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.2= 1.2.1= 1.2.10= 1.2.2= 1.2.3= 1.2.4= 1.2.5= 1.2.6= 1.2.7= 1.2.8= 1.2.9= 4.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4≤ 4.0.5

No fix yet

Altre vulnerabilità di groupware webmail edition

Vedi tutto →