CVE-2020-8034

CVE-2020-8034 affects Gollem before 3.0.13 (used in Horde Groupware Webmail Edition 5.2.22 and other products). The vulnerability is a reflected XSS via the HTTP GET dir parameter in the browser functionality, impacting breadcrumb output. Exploitation can lead to an attacker gaining access to a v...

CVE-2010-3447

The CVE-2010-3447 entry describes a cross-site scripting (XSS) vulnerability in Horde Gollem’s file viewer. Specifically, view.php in the viewer accepts a file parameter in a view_file action, allowing remote attackers to inject arbitrary web script or HTML. Affected software is Horde Gollem up t...