SSD Advisory – Horde Webmail Multiple Vulnerabilities

Vulnerabilities Description The following report describes two (2) different vulnerabilities found in Horde Webmail (version 5.2.15), used by hundred of thousands websites around the world. The vulnerabilities allows the attacker to gain remote command execution. The following vulnerabilities in Horde were found: PHP script execution via CSRF attack Upload an SVG image file containing malicious Javascript code Credit An …

SSD Advisory – Horde Webmail Multiple Vulnerabilities Read More »