CVE-2014-1691
01.04.2014, 15:55
The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via a crafted serialized object in the _formvars form.
| Vendor | Product | Version |
|---|---|---|
| horde | horde_application_framework | 𝑥 ≤ 5.1.0 |
| horde | horde_application_framework | 5.0.0 |
| horde | horde_application_framework | 5.0.1 |
| horde | horde_application_framework | 5.0.2 |
| horde | horde_application_framework | 5.0.3 |
| horde | horde_application_framework | 5.0.4 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| horde3 |
| ||||||||||||||||||||||
| php-horde-util |
|
References