8 matches found
Horde 3.3.12 Backdoor Arbitrary PHP Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
DSquare Exploit Pack: D2SEC_HORDE_BACKDOOR
Name| d2sechordebackdoor ---|--- CVE| CVE-2012-0209 Exploit Pack| D2ExploitPack Description| d2sechordebackdoor Notes|...
CVE-2012-0209
CVE-2012-0209 corresponds to a backdoor backdoor in Horde 3.3.12 and Horde Groupware 1.2.10/1.2.10 Webmail, introduced via an unauthorized modification in templates/javascript/open_calendar.js. Affected packages include Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2...
CVE-2012-0209
creationtimestamp| type| source ---|---|--- 2012-02-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18492 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/hordehrefbackdoor.rb 2025-02-06 03:13:40+00:00| seen|...
Horde 3.3.12 open_calendar.js Backdoor
A backdoored Horde release was detected on the remote host. The Horde FTP server was compromised, and backdoor code was added to allow arbitrary PHP execution. The backdoor reportedly was present in versions of Horde 3.3.12 downloaded between November 15, 2011 and February 7, 2012. A remote,...
Horde 3.3.12 Backdoor Arbitrary PHP Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Horde 3.3.12...
Horde Groupware Source Packages Backdoor Vulnerability
Horde Groupware is prone to a backdoor vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Successful attacks will compromise the affected application. Horde Groupware versions 1.2.10 between November 2, 2011, and February 7, 2012, are...
Horde 3.3.12 Backdoor Arbitrary PHP Code Execution
This module exploits an arbitrary PHP code execution vulnerability introduced as a backdoor into Horde 3.3.12 and Horde Groupware 1.2.10. Module Options msf use exploit/multi/http/horde/hrefbackdoor msf undefinedhrefbackdoor show actions ...actions... msf undefinedhrefbackdoor set ACTION msf...