1823 matches found
Fedora 28 : php-horde-Horde-Form (2019-fb2ce5f6d9)
HordeForm 2.0.19 - mjr SECURITY: Prevent RCE vulnerability due to potential directory traversal in Image uploads An independent security researcher has reported this vulnerability to SecuriTeam Secure Disclosure program. Note that Tenable Network Security has extracted the preceding description...
Horde IMP <= 7.0.0 RCE Vulnerability
Horde IMP is prone to an unauthenticated remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Horde Imp - imap_open Remote Command Execution
Exploit for php platform in category web applications Exploit Title: Horde Imp Unauthenticated Remote Command Execution Google Dork: inurl:/imp/login.php Exploit Author: Paolo Serracino - Pietro Minniti - Damiano Proietti Vendor Homepage: https://www.horde.org/apps/imp/ Software Link:...
Horde Imp - 'imap_open' Remote Command Execution
Exploit Title: Horde Imp Unauthenticated Remote Command Execution Google Dork: inurl:/imp/login.php Date: 10/01/2019 Exploit Author: Paolo Serracino - Pietro Minniti - Damiano Proietti Vendor Homepage: https://www.horde.org/apps/imp/ Software Link: https://www.horde.org/download/imp Version: All...
Horde Imp Unauthenticated Remote Command Execution
Exploit Title: Horde Imp Unauthenticated Remote Command Execution Google Dork: inurl:/imp/login.php Date: 10/01/2019 Exploit Author: Paolo Serracino - Pietro Minniti - Damiano Proietti Vendor Homepage: https://www.horde.org/apps/imp/ Software Link: https://www.horde.org/download/imp Version: All...
Horde Imp - imap_open Remote Command Execution
Horde Imp - imapopen Remote Command Execution Exploit Title: Horde Imp Unauthenticated Remote Command Execution Google Dork: inurl:/imp/login.php Date: 10/01/2019 Exploit Author: Paolo Serracino - Pietro Minniti - Damiano Proietti Vendor Homepage: https://www.horde.org/apps/imp/ Software Link:...
Fedora Update for php-horde-Horde-Image FEDORA-2019-944ff52ce6
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 28 Update: php-horde-Horde-Image-2.5.4-1.fc28
An Image utility API, with backends for: GD GIF PNG SVG SWF ImageMagick convert command line tool Imagick Extension Optional dependency: php-pecl-imagick...
Fedora 29 : php-horde-Horde-Image (2019-89c1abeac9)
HordeImage 2.5.4 - mjr SECURITY: Fix potential RCE in the text method when using the Imagemagick backend. - mjr SECURITY: Sanitize image type parameter PR: 2, Fariskhi Vidyan. - mjr Fix issues with escaping single and double quote characters in the text method when using the Imagemagick backend...
Fedora 28 : php-horde-nag (2018-8dfeb06ce9)
nag 4.2.19 - mjr SECURITY: Fix multiple XSS vulnerabilities when displaying and filtering task lists. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much...
Fedora 28 : php-horde-horde (2018-520062dcb8)
Horde 5.2.20 - mjr SECURITY: Fix XSS vulnerability when rendering custom background colors in a sidebar row Bug 14857. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...
Fedora 28 : php-horde-kronolith (2018-1c9f3f4d9e)
Kronolith 4.2.25 - mjr SECURITY: Fix XSS vulnerability in resource group property view Bug 14857. - mjr SECURITY: Fix XSS vulnerability in event URL field Bug 14857. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...
Fedora 29 : php-horde-nag (2018-8ab75bcc08)
nag 4.2.19 - mjr SECURITY: Fix multiple XSS vulnerabilities when displaying and filtering task lists. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much...
Fedora 29 : php-horde-Horde-Core (2018-6a2f930619)
HordeCore 2.31.6 - mjr SECURITY: Fix XSS vulnerability when rendering a colorpicker Bug 14857. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...
Fedora 28 : php-horde-Horde-Core (2018-f4558a5180)
HordeCore 2.31.6 - mjr SECURITY: Fix XSS vulnerability when rendering a colorpicker Bug 14857. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...
Fedora 29 : php-horde-horde (2018-b676498882)
Horde 5.2.20 - mjr SECURITY: Fix XSS vulnerability when rendering custom background colors in a sidebar row Bug 14857. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...
Fedora 29 : php-horde-kronolith (2018-8b97249503)
Kronolith 4.2.25 - mjr SECURITY: Fix XSS vulnerability in resource group property view Bug 14857. - mjr SECURITY: Fix XSS vulnerability in event URL field Bug 14857. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...
[SECURITY] Fedora 29 Update: php-horde-nag-4.2.19-1.fc29
Nag is a web-based application built upon the Horde Application Framework which provides a simple, clean interface for managing online task lists i.e., todo lists. It also includes strong integration with the other Horde applications and allows users to share task lists or enable light-weight...
Fedora Update for php-horde-nag FEDORA-2018-8dfeb06ce9
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-horde-nag FEDORA-2018-113c354377
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...