Mandriva Linux Security Advisory : kolab-horde-framework (MDVSA-2010:108)

A vulnerability was discovered and fixed in kolab-horde-framework : Unspecified vulnerability in Kolab Webclient before 1.2.0 in Kolab Server before 2.2.3 allows attackers to have an unspecified impact via vectors related to an image upload form. CVE-2009-4824. Packages for 2008.0 and 2009.0 are...

Fedora Update for horde FEDORA-2010-5520

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for horde FEDORA-2010-5483

Check for the Version of horde OpenVAS Vulnerability Test Fedora Update for horde FEDORA-2010-5483 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for imp FEDORA-2010-5508

Check for the Version of imp OpenVAS Vulnerability Test Fedora Update for imp FEDORA-2010-5508 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for horde FEDORA-2010-5520

Check for the Version of horde OpenVAS Vulnerability Test Fedora Update for horde FEDORA-2010-5520 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for horde FEDORA-2010-5483

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 13 Update: horde-3.3.6-1.fc13

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

[SECURITY] Fedora 12 Update: horde-3.3.6-1.fc12

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

[SECURITY] Fedora 11 Update: horde-3.3.6-1.fc11

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

openSUSE Security Update : horde (horde-1947)

This update of horde fixes : - CVE-2009-3236: CVSS v2 Base Score: 5.0: Overwrite arbitrary files and execute PHP code - CVE-2009-3237: CVSS v2 Base Score: 5.0: Cross-Site Scripting XSS - CVE-2009-3701: CVSS v2 Base Score: 4.3: Cross-Site Scripting XSS - CVE-2009-4363: CVSS v2 Base Score: 4.3:...

Horde IMP Information Disclosure Vulnerability

This host is running Horde IMP and is prone to Information Disclosure vulnerability OpenVAS Vulnerability Test $Id: gbhordeimpinfodiscvuln.nasl 5820 2017-03-31 11:20:49Z cfi $ Horde IMP Information Disclosure Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Horde IMP <= 4.3.6 Information Disclosure Vulnerability

Horde IMP is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2010-0463

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests...

CVE-2010-0463

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests...

CVE-2010-0463

CVE-2010-0463 affects Horde IMP 4.3.6 and earlier. The vulnerability arises because Horde IMP does not prevent DNS prefetching of domain names contained in e‑mail messages, enabling remote attackers to infer the webmail user’s network location by logging DNS requests. The NVD entry lists a CVSS v...

CVE-2010-0463

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests...

mysql-databases NSE Script

Attempts to list all databases on a MySQL server. Script Arguments mysqluser The username to use for authentication. If unset it attempts to use credentials found by mysql-brute or mysql-empty-password. mysqlpass The password to use for authentication. If unset it attempts to use credentials foun...

DSA-1966-1 horde3 - cross-site scripting

Bulletin has no description...

Horde应用框架管理界面PHP_SELF参数跨站脚本漏洞

BUGTRAQ ID: 37351 CVE ID: CVE-2009-3701 Horde Framework是个以PHP为基础的架构，用于创建网络应用程序。 Horde没有正确地过滤用户通过URL提交给admin/phpshell.php、admin/cmdshell.php和admin /sqlshell.php的PHPSELF参数，远程攻击者可以通过提交恶意请求执行跨站脚本攻击，在用户浏览器会话中执行任意代码。 Horde Horde 3.x Horde Groupware 1.2.x 厂商补丁： Horde -----...

CVE-2009-3701

Multiple cross-site scripting XSS vulnerabilities in the administration interface in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1...