NetSight
IP …
medium6.4Public exploit code

CVE-2009-0932

Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remote attackers to incl…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Horde_Image driver name.

Affected products

VendorProductAffected versions
DebianHorde
Versions 3.2, 3.2.2, 3.2.3, 3.3, 3.3.1, 3.3.2
DebianHorde Groupware
Versions 1.1.1, 1.1.2, 1.1.3, 1.1.4

Weakness classification

CWE-22

References