Ubuntu.comUB:CVE-2009-3701CVE-2009-3701
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.033 Low
EPSS
Percentile
91.2%
Multiple cross-site scripting (XSS) vulnerabilities in the administration
interface in Horde Application Framework before 3.3.6, Horde Groupware
before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 allow remote
attackers to inject arbitrary web script or HTML via the PATH_INFO to (1)
phpshell.php, (2) cmdshell.php, or (3) sqlshell.php in admin/, related to
the PHP_SELF variable.
Related
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.033 Low
EPSS
Percentile
91.2%