CVE-2017-16906

Mô tả

Tham khảo

• code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html · Exploit
• horde/kronolith commit 09d9014 · Patch
• starnightcyber/Miscellaneous · Exploit
• lists.debian.org/debian-lts-announce/2020/08/msg00049.html

Lỗ hổng khác của groupware

• CVE-2025-41066TRUNG BÌNH 5.3Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid acc…
• CVE-2022-30287CAO 8.0Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class…
• CVE-2021-26929TRUNG BÌNH 6.1An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). Th…
• CVE-2020-8034TRUNG BÌNH 6.1Gollem before 3.0.13, as used in Horde Groupware Webmail Edition 5.2.22 and other products, is affected by a reflected Cross-Site Scripting …
• CVE-2020-8035TRUNG BÌNH 6.1The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripting (XSS) vulnerabili…