Horde javascript.php Backdoor RCE (CVE-2012-0209)

Exploits CVE-2012-0209 by passing shell commands through the href Cookie to /services/javascript.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Horde javascript.php backdoor RCE CVE-2012-0209 — execute session.""" from future import annotations import re...

Horde - javascript.php Backdoor Detection (CVE-2012-0209)

Detects CVE-2012-0209 by requesting services/javascript.php with Cookie href=id. !/usr/bin/env python3 -- coding: utf-8 -- """Horde Groupware javascript.php backdoor CVE-2012-0209.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

CVE-2025-4514

A vulnerability, which was classified as critical, has been found in Zhengzhou Jiuhua Electronic Technology mayicms up to 5.8E. Affected by this issue is some unknown functionality of the file /javascript.php. The manipulation of the argument Value leads to sql injection. The attack may be launch...

CVE-2025-4514

CVE-2025-4514 applies to Zhengzhou Jiuhua Electronic Technology mayicms up to 5.8E. The vulnerability affects the file /javascript.php ; modifying the Value parameter enables a SQL injection. The issue can be exploited remotely and an exploit has been disclosed publicly. Connected advisories corr...

CVE-2025-4514: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Zhengzhou Jiuhua Electronic Technology mayicms up to 5.8E. Affected by this issue is some unknown functionality of the file /javascript.php. The manipulation of the argument Value leads to sql injection. The attack may be launch...

CVE-2012-1207

Directory traversal vulnerability in frontend/core/engine/javascript.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to read arbitrary files via a .. dot dot in the module parameter to frontend/js.php...

CVE-2012-1207: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in frontend/core/engine/javascript.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to read arbitrary files via a .. dot dot in the module parameter to frontend/js.php...

Horde 3.3.12 Backdoor Arbitrary PHP Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Horde 3.3.12...