CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 17/01/2003 |
| CVE-2002-2024 | 中危5.3 | Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spelling.php3, and (4) ldap.search.php3?ldap_serv=nonsense which leaks the information in error messages. | 31/12/2002 |
| CVE-2002-0181 | 高危7.5 | Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and steal cookies of other IMP/HORDE users via the script parameter. | 22/04/2002 |
| CVE-2001-0744 | 低危2.1 | Horde IMP 2.2.4 and earlier allows local users to overwrite files via a symlink attack on a temporary file. | 18/10/2001 |
| CVE-2001-1258 | 低危3.6 | Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server. | 21/07/2001 |
| CVE-2001-1257 | 高危7.5 | Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript embedded in an email. | 21/07/2001 |
| CVE-2000-0911 | 中危5.0 | IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form variable, which causes IMP to send the file to the attacker as an attachment. | 19/12/2000 |
| CVE-2000-0910 | 中危4.6 | Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address. | 19/12/2000 |