UBUNTU-CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

CVE-2013-6365

Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions...

CVE-2013-6365

Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions...

CVE-2013-6365

The CVE-2013-6365 entry relates to Horde Groupware Webmail 5.1.2 and describes a CSRF vulnerability in which requests to change permissions can be forged. Public references (e.g., Exploit-DB) describe a CSRF flaw in the Change of permissions function due to a missing or insufficient token in the ...

CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

CVE-2013-6364

CVE-2013-6364 concerns the Horde Groupware Webmail Edition, where saving a search as a virtual address book is vulnerable to CSRF and XSS. The vulnerability arises in the webmail component when performing the save operation, enabling an attacker to induce cross-site requests or script execution i...

Tiki Wiki CMS Groupware cross-site scripting vulnerability (CNVD-2019-39359)

Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite . A cross-site scripting vulnerability exists in Tiki Wiki CMS Groupware version 5.2, which stems from a lack of proper validation of client-side data in the web application and can be exploited ...

Tiki Wiki CMS Groupware Cross-Site Request Forgery Vulnerability

Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite . A cross-site request forgery vulnerability exists in Tiki Wiki CMS Groupware version 5.2, which arises from a WEB application that does not adequately validate that a request is coming from a...

Tiki Wiki CMS Groupware File Inclusion Vulnerability

Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite . A file inclusion vulnerability exists in Tiki Wiki CMS Groupware version 5.2, which can be exploited by an attacker to include arbitrary files...

CVE-2010-4241

Tiki Wiki CMS Groupware 5.2 has CSRF...

CVE-2010-4240

Tiki Wiki CMS Groupware 5.2 has XSS...

Cross site scripting

Tiki Wiki CMS Groupware 5.2 has XSS...

Cross site request forgery (csrf)

Tiki Wiki CMS Groupware 5.2 has CSRF...

CVE-2010-4239

Tiki Wiki CMS Groupware 5.2 is affected by a Local File Inclusion (LFI) vulnerability (CVE-2010-4239). The Nuclei template confirms the issue in Tiki Wiki CMS Groupware 5.2, describing how an LFI flaw can lead to unauthorized access to sensitive files. Impact is stated as exposing sensitive infor...

CVE-2010-4240

Tiki Wiki CMS Groupware 5.2 has XSS...

CVE-2010-4240

The CVE-2010-4240 entry concerns Tiki Wiki CMS Groupware 5.2 with a cross-site scripting (XSS) vulnerability. The connected records indicate an XSS flaw arising from insufficient validation of client-side data in the web application, enabling execution of injected script. No exploit details, affe...

CVE-2010-4241

CVE-2010-4241 concerns Tiki Wiki CMS Groupware 5.2, where the web application is vulnerable to a Cross-Site Request Forgery (CSRF) due to insufficient validation of request origin. The vulnerability allows an attacker to induce a user to perform unintended actions on a trusted site, potentially i...

CVE-2019-12095

Horde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows CSRF, as demonstrated by the treanBookmarkTags parameter to the trean/ URI on a webmail server. NOTE: treanBookmarkTags could, for example, be a stored XSS payload...

CVE-2019-12095

Horde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows CSRF, as demonstrated by the treanBookmarkTags parameter to the trean/ URI on a webmail server. NOTE: treanBookmarkTags could, for example, be a stored XSS payload...