Vulners
Lucene search
| Reporter | Title | Published | Views | Family All 27 |
|---|---|---|---|---|
 | Horde Groupware Webmail Edition 5.2.22 - Remote Code Execution Exploit | 15 Mar 202000:00 | – | zdt |
| Horde 5.2.22 CSV Import Code Execution Exploit | 23 Mar 202000:00 | – | zdt |
 | CVE-2020-8518 | 23 Mar 202012:42 | – | circl |
 | Horde Groupware Remote Code Execution (CVE-2020-8518) | 3 Jun 202000:00 | – | checkpoint_advisories |
 | CVE-2020-8518 | 17 Feb 202014:53 | – | cvelist |
 | [SECURITY] [DLA 2174-1] php-horde-data security update | 15 Apr 202003:02 | – | debian |
 | CVE-2020-8518 | 17 Feb 202014:53 | – | debiancve |
 | Debian DLA-2174-1 : php-horde-data security update | 15 Apr 202000:00 | – | nessus |
| Fedora 30 : php-horde-Horde-Data (2020-0248ad925e) | 14 Feb 202000:00 | – | nessus |
| Fedora 31 : php-horde-Horde-Data (2020-1e7cc91d55) | 14 Feb 202000:00 | – | nessus |
10
Node
OR
Node
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| horde_user | request body | login.php | Authentication endpoint used in the CSV-based RCE flow. | CWE-94 |
| horde_pass | request body | login.php | Authentication endpoint used in the CSV-based RCE flow. | CWE-94 |
| login_post | request body | login.php | Authentication endpoint used in the CSV-based RCE flow. | CWE-94 |
| actionID | request body | mnemo/data.php | CSV data import endpoint where the payload is injected to achieve remote code execution. | CWE-94 |
| import_step | request body | mnemo/data.php | CSV data import endpoint where the payload is injected to achieve remote code execution. | CWE-94 |
| import_format | request body | mnemo/data.php | CSV data import endpoint where the payload is injected to achieve remote code execution. | CWE-94 |
| header | request body | mnemo/data.php | CSV data import endpoint where the payload is injected to achieve remote code execution. | CWE-94 |
| fields | request body | mnemo/data.php | CSV data import endpoint where the payload is injected to achieve remote code execution. | CWE-94 |
| sep | request body | mnemo/data.php | CSV data import endpoint where the payload is injected to achieve remote code execution. | CWE-94 |
| quote | request body | mnemo/data.php | CSV data import endpoint where the payload is injected to achieve remote code execution. | CWE-94 |
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 03:26Current
9.8High risk
Vulners AI Score9.8
CVSS 27.5
CVSS 3.19.8
EPSS0.71728