Page 2 of 7 results (0.004 seconds)

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0

Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL. • http://marc.info/?l=bugtraq&m=106081310531567&w=2 http://marc.info/?l=bugtraq&m=106252836330987&w=2 •

CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0

Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address. • http://archives.neohapsis.com/archives/bugtraq/2000-09/0051.html http://ssl.coc-ag.de/sec/hordelib-1.2.0.frombug.patch http://www.debian.org/security/2000/20000910 http://www.securityfocus.com/bid/1674 https://exchange.xforce.ibmcloud.com/vulnerabilities/5278 •