Approved changes feed: RSS · Atom
cpe:2.3:a:horde:vfs:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Horde (11d5bec1-2c1f-5ad3-b7a5-41ab167a139d) |
|---|---|
| Product | Vfs (47172049-dd17-547e-92cc-50af9bc2bc12) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-60102 |
vulnerable | 2026-07-29 01:03:23.735426 |
Horde VFS < 3.0.1 OS Command Injection via Horde_Vfs_Smb Driver
HIGH (8.8)
Horde Virtual File System (VFS) API before 3.0.1 contains an OS command injection vulnerability in the Horde_Vfs_Smb driver where the _escapeShellCommand() method fails to sanitize command substitution sequences, allowing authenticated attackers to inject arbitrary shell commands through user-controlled filenames. Attackers can supply malicious filenames containing unescaped command substitution payloads through operations such as file upload, folder creation, rename, or deletion, which are interpolated into a double-quoted shell context and executed via proc_open() through /bin/sh -c before smbclient runs, resulting in arbitrary command execution on the underlying system.
Published: 2026-07-08T16:25:19.153Z
Updated: 2026-07-14T22:03:29.942Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.