Fedora 29 : php-horde-turba (2019-6119518602)

turba 4.2.24 - mjr SECURITY: Fix XSS vulnerability in display of contact tags. - jan Clarify objectClass filter examples for LDAP backends Ralf Lang. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora 29 : php-horde-horde (2019-4226584eef)

horde 5.2.21 - mjr SECURITY: Fix XSS vulnerability in the Cloud Block. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducin...

Fedora 30 : php-horde-turba (2019-e29ba2d34a)

turba 4.2.24 - mjr SECURITY: Fix XSS vulnerability in display of contact tags. - jan Clarify objectClass filter examples for LDAP backends Ralf Lang. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora Update for php-horde-turba FEDORA-2019-146df522df

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 28 : php-horde-turba (2019-146df522df)

turba 4.2.24 - mjr SECURITY: Fix XSS vulnerability in display of contact tags. - jan Clarify objectClass filter examples for LDAP backends Ralf Lang. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora 30 : php-horde-horde (2019-d348f5a9e7)

horde 5.2.21 - mjr SECURITY: Fix XSS vulnerability in the Cloud Block. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducin...

Fedora 28 : php-horde-horde (2019-a975e52e95)

horde 5.2.21 - mjr SECURITY: Fix XSS vulnerability in the Cloud Block. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducin...

[SECURITY] Fedora 30 Update: php-horde-turba-4.2.24-1.fc30

Turba is the Horde contact management application. Leveraging the Horde framework to provide seamless integration with IMP and other Horde applications, it supports storing contacts in SQL, LDAP, Kolab, and IMSP address books...

[SECURITY] Fedora 30 Update: php-horde-horde-5.2.21-1.fc30

The Horde Application Framework is a flexible, modular, general-purpose web application framework written in PHP. It provides an extensive array of components that are targeted at the common problems and tasks involved in developing modern web applications. It is the basis for a large number of...

Horde Groupware Webmail Code Execution Vulnerability

Horde Groupware Webmail is a browser-based, enterprise-class communications suite from Horde, Inc. A security vulnerability exists in Horde Groupware Webmail. A remote attacker can exploit this vulnerability to execute arbitrary PHP code...

Horde Form Shell Upload

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Horde Form File Upload Vulnerability', 'Description' = %q Horde Groupware Webmail contains a flaw that allows an authenticated remote attacker to...

Horde Form File Upload Vulnerability

Horde Groupware Webmail contains a flaw that allows an authenticated remote attacker to execute arbitrary PHP code. The exploitation requires the Turba subcomponent to be installed. This module was tested on Horde versions 5.2.22 and 5.2.17 running Horde Form subcomponent use...

VulnCheck KEV: CVE-2012-0791

Multiple cross-site scripting XSS vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 composeCache, 2 rtemode, or 3 filename parameters to the compose page; 4 formname...

Horde Imp Unauthenticated Remote Command Execution

Added: 01/18/2019 BID: 106018 Background The IMP is a web-based mail client for IMAP and POP3 accounts. It is built atop the Horde Application Framework, which is a general-purpose web application library written in PHP. Problem A vulnerability in Horde IMP could allow unauthenticated command...

Horde Imp Unauthenticated Remote Command Execution

Added: 01/18/2019 BID: 106018 Background The IMP is a web-based mail client for IMAP and POP3 accounts. It is built atop the Horde Application Framework, which is a general-purpose web application library written in PHP. Problem A vulnerability in Horde IMP could allow unauthenticated command...

Horde Imp Unauthenticated Remote Command Execution

Added: 01/18/2019 BID: 106018 Background The IMP is a web-based mail client for IMAP and POP3 accounts. It is built atop the Horde Application Framework, which is a general-purpose web application library written in PHP. Problem A vulnerability in Horde IMP could allow unauthenticated command...

[SECURITY] Fedora 29 Update: php-horde-Horde-Form-2.0.19-1.fc29

The HordeForm package provides form rendering, validation, and other functionality for the Horde Application Framework...

[SECURITY] Fedora 28 Update: php-horde-Horde-Form-2.0.19-1.fc28

The HordeForm package provides form rendering, validation, and other functionality for the Horde Application Framework...

Fedora Update for php-horde-Horde-Form FEDORA-2019-fb2ce5f6d9

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 29 : php-horde-Horde-Form (2019-8fe9d427f1)

HordeForm 2.0.19 - mjr SECURITY: Prevent RCE vulnerability due to potential directory traversal in Image uploads An independent security researcher has reported this vulnerability to SecuriTeam Secure Disclosure program. Note that Tenable Network Security has extracted the preceding description...