Horde Application Framework 3.3.5

CPE Details

Horde Application Framework 3.3.5
horde
horde_application_framework
3.3.5
2009-12-22
12h03 +00:00
2010-11-19
17h29 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:horde:horde_application_framework:3.3.5:*:*:*:*:*:*:*

Informations

Vendor

horde

Product

horde_application_framework

Version

3.3.5

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2014-1691 2014-04-01 13h00 +00:00 The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via a crafted serialized object in the _formvars form.
7.5
CVE-2010-3077 2010-11-09 19h00 +00:00 Cross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML via the subdir parameter.
4.3
CVE-2010-3694 2010-11-09 19h00 +00:00 Cross-site request forgery (CSRF) vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form.
6.8