Arbitrary PHP Code Execution Vulnerability in Horde Groupware

CVE-2012-0209 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2012, contains an externally introduced modification (Trojan Horse) in templates/javascript/open_calendar.js, which allows remote attackers to execute arbitrary PHP code.

Learn more about our Web App Pen Testing.