GCVE - cpe:2.3:a:horde:horde:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:horde:horde:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Horde (`11d5bec1-2c1f-5ad3-b7a5-41ab167a139d`)
Product	Horde (`dbb2bab1-c791-557e-a678-b5eb581d3a62`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/horde/base`	purl2cpe	2026-06-01 10:15:52.250519
`pkg:rpm/fedora/horde`	purl2cpe	2026-06-01 10:15:52.250520
`pkg:rpm/opensuse/horde5`	purl2cpe	2026-06-01 10:15:52.250522

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-1638`	vulnerable	2026-06-08 04:54:09.533214	Details available The IMP plugin in Horde allows remote attackers to bypass firewall restrictions and use Horde as a proxy to scan internal networks via a crafted request to an unspecified test script. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. Published: 2010-06-22T17:00:00.000Z Updated: 2024-08-07T01:28:41.580Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2010/05/25/2 http://www.openwall.com/lists/oss-security/2010/05/21/2 http://conference.hitb.org/hitbsecconf2010dxb/materials/D1%20-%20Laurent%20Oudot%20-%20Improving%20the%20Stealthiness%20of%20Web%20Hacking.pdf#page=74	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2195`	vulnerable	2026-06-08 04:48:59.089367	Details available Cross-site scripting (XSS) vulnerability in horde 3 (horde3) before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) templates/problem/problem.inc and (2) test.php. Published: 2006-06-15T10:00:00.000Z Updated: 2024-08-07T17:43:28.324Z Open on db.gcve.eu Reference links http://cvs.horde.org/diff.php?f=horde%2Ftest.php&r1=1.145&r2=1.146 https://exchange.xforce.ibmcloud.com/vulnerabilities/27168 http://secunia.com/advisories/20750 http://overlays.gentoo.org/dev/chtekk/browser/horde/www-apps/horde/files/horde-3.1.1-xss.diff?rev=4&format=txt http://cvs.horde.org/diff.php?r1=2.25&r2=2.26&f=horde%2Ftemplates%2Fproblem%2Fproblem.inc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0728`	vulnerable	2026-06-08 04:47:22.335379	Details available Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL. Published: 2003-09-03T04:00:00.000Z Updated: 2024-08-08T02:05:12.521Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=106081310531567&w=2 http://marc.info/?l=bugtraq&m=106252836330987&w=2	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.