Home / os / winmobile

Horde 5.2.22 CSV Import Code Execution

Posted on 24 March 2020

The Horde_Data module version 2.1.4 (and before) present in Horde Groupware version 5.2.22 allows authenticated users to inject arbitrary PHP code thus achieving remote code execution the server hosting the web application.

 

TOP