CVE-2019-12094

Description

References

• bugs.horde.org/ticket/14926 · Exploit
• cxsecurity.com/issue/WLB-2019050199 · Exploit
• numanozdemir.com/respdisc/horde/horde.mp4 · Exploit
• numanozdemir.com/respdisc/horde/horde.txt · Exploit
• packetstormsecurity.com/files/152975/Horde-Webmail-5.2.22-XSS-CSRF-SQL-Injection-Code-Execution.html · Exploit
• exploit-db.com/exploits/46903 · Exploit

groupware의 다른 취약점

• CVE-2025-41066보통 5.3Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid acc…
• CVE-2022-30287높음 8.0Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class…
• CVE-2021-26929보통 6.1An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). Th…
• CVE-2020-8034보통 6.1Gollem before 3.0.13, as used in Horde Groupware Webmail Edition 5.2.22 and other products, is affected by a reflected Cross-Site Scripting …
• CVE-2020-8035보통 6.1The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripting (XSS) vulnerabili…