Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2009-3701 — Cross-site Scripting in Application Framework

CWE-79 — Cross-site Scripting8 documents5 sources
Severity
4.3MEDIUMNVD
EPSS
2.2%
top 15.59%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Horde Application FrameworkHorde Groupware
Timeline
PublishedDec 21
Latest updateMay 2

Description

Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) phpshell.php, (2) cmdshell.php, or (3) sqlshell.php in admin/, related to the PHP_SELF variable.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶NVDhorde/groupware1.2.4+20

Patches

Patch: lists.horde.org ↗Patch: marc.info ↗Patch: www.vupen.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-pfm3-37qv-rm2q: Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework before 3↗2022-05-02
▶

💥Exploits & PoCs

4
Exploit-DB
Horde 3.3.5 - 'PHP_SELF' Cross-Site Scripting↗2009-12-17
▶
Exploit-DB
Horde 3.3.5 - '/Administration Interface admin/cmdshell.php?PATH_INFO' Cross-Site Scripting↗2009-12-15
▶
Exploit-DB
Horde 3.3.5 - '/Administration Interface admin/sqlshell.php?PATH_INFO' Cross-Site Scripting↗2009-12-15
▶
Exploit-DB
Horde 3.3.5 - Cross-Site Scripting↗2009-12-15
▶

📋Vendor Advisories

1
Red Hat
horde: PHP_SELF XSS vulnerabilities↗2009-12-16
▶

💬Community

1
Bugzilla
CVE-2009-3701 horde: PHP_SELF XSS vulnerabilities↗2009-12-21
▶