Horde Application Framework 3.1.2

CPE Details

Horde Application Framework 3.1.2
horde
horde_application_framework
3.1.2
2007-08-23
19h16 +00:00
2010-11-19
17h29 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:horde:horde_application_framework:3.1.2:*:*:*:*:*:*:*

Informations

Vendor

horde

Product

horde_application_framework

Version

3.1.2

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2014-1691 2014-04-01 13h00 +00:00 The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via a crafted serialized object in the _formvars form.
7.5
CVE-2010-3077 2010-11-09 19h00 +00:00 Cross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML via the subdir parameter.
4.3
CVE-2010-3694 2010-11-09 19h00 +00:00 Cross-site request forgery (CSRF) vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form.
6.8
CVE-2007-1473 2007-03-16 20h00 +00:00 Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login page contains a language selection box, allows remote attackers to inject arbitrary web script or HTML via the new_lang parameter to login.php.
4.3