PT-2020-3630 · Roundcube +4 · Roundcube Webmail +4

Name of the Vulnerable Software and Affected Versions: Roundcube Webmail versions 1.2.10 and earlier, 1.3.x before 1.3.14, and 1.4.x before 1.4.7 Description: The issue allows for cross-site scripting XSS via a crafted HTML e-mail message. This can be demonstrated by a JavaScript payload in the...

PT-2020-3640 · Roundcube +3 · Roundcube Webmail +3

Name of the Vulnerable Software and Affected Versions: Roundcube Webmail versions prior to 1.3.12 Roundcube Webmail versions 1.4.x prior to 1.4.5 Description: The issue is related to insufficient protection measures for web page structures in Roundcube Webmail, allowing a remote attacker to impac...

PT-2020-3641 · Roundcube +3 · Roundcube Webmail +3

Name of the Vulnerable Software and Affected Versions: Roundcube Webmail versions prior to 1.3.12 Roundcube Webmail versions 1.4.x prior to 1.4.5 Description: The issue is related to insufficient protection measures for web page structures in Roundcube Webmail, allowing a remote attacker to impac...

PT-2023-5637

Name of the Vulnerable Software and Affected Versions: Roundcube versions prior to 1.4.14, 1.5.x prior to 1.5.4, and 1.6.x prior to 1.6.3. Description: Roundcube Webmail contains a cross-site scripting XSS vulnerability in the rcube string replacer.php component due to insufficient sanitization o...

CVE-2013-6275

Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php...

DEBIAN-CVE-2013-6275

Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php...

CVE-2013-6275

Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php...

CVE-2013-6275

Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php...

UBUNTU-CVE-2013-6275

Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php...

Cross site request forgery (csrf)

Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php...

CVE-2013-6275

CVE-2013-6275 affects Horde Groupware Webmail Edition up to 5.1.2, specifically in basic.php, with multiple CSRF issues. The root cause is missing CSRF protections in several functions; exploitation details are shown in the Exploit-DB entry (Horde Groupware Web Mail Edition 5.1.2 CSRF). The conne...

CVE-2013-6275

Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php...

CVE-2013-6275

Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php...

CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

DEBIAN-CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

DEBIAN-CVE-2013-6365

Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions...

UBUNTU-CVE-2013-6364

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

UBUNTU-CVE-2013-6365

Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions...

CVE-2013-6364

CVE-2013-6364 concerns the Horde Groupware Webmail Edition, where saving a search as a virtual address book is vulnerable to CSRF and XSS. The vulnerability arises in the webmail component when performing the save operation, enabling an attacker to induce cross-site requests or script execution i...

Horde Groupware Webmail < 5.2.21 Multiple Vulnerabilities - Linux

Horde Groupware Webmail is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...