Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
CVE-2007-1474 — Argument Injection in Application Framework
4 documents4 sources
Severity
6.8MEDIUMNVD
EPSS
1.7%
top 17.60%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedMar 16
Latest updateMay 1
Description
Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files and possibly gain privileges via multiple space-delimited pathnames.
CVSS vector
AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4
Affected Packages2 packages
Patches
🔴Vulnerability Details
1GHSA▶
GHSA-j5cq-w784-xr7r: Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3↗2022-05-01