Approved changes feed: RSS · Atom

cpe:2.3:a:horde:horde:3.3.12:*:*:*:*:*:*:*

part: a version: 3.3.12 update: *

VendorHorde (11d5bec1-2c1f-5ad3-b7a5-41ab167a139d)
ProductHorde (dbb2bab1-c791-557e-a678-b5eb581d3a62)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/horde/base purl2cpe 2026-06-01 10:15:52.310691
pkg:rpm/fedora/horde purl2cpe 2026-06-01 10:15:52.310693
pkg:rpm/opensuse/horde5 purl2cpe 2026-06-01 10:15:52.310694

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-0209 vulnerable 2026-06-08 05:00:39.934480 Details available
Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2012, contains an externally introduced modification (Trojan Horse) in templates/javascript/open_calendar.js, which allows remote attackers to execute arbitrary PHP code.
Published: 2012-09-25T22:00:00.000Z
Updated: 2024-09-16T21:57:27.267Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.