CVE-2013-6364

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Horde Groupware Web Mail Edition 5.1.2 - Cross-Site Request Forgery (2)2013-11-08 · webapps · php · Verified

Impact

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://archives.neohapsis.com/archives/bugtraq/2013-11/0012.html
• http://www.exploit-db.com/exploits/29519
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-6364
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-6364
• https://security-tracker.debian.org/tracker/CVE-2013-6364
• https://www.securityfocus.com/archive/1/529589
• http://archives.neohapsis.com/archives/bugtraq/2013-11/0012.html
• http://www.exploit-db.com/exploits/29519
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-6364
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-6364
• https://security-tracker.debian.org/tracker/CVE-2013-6364
• https://www.securityfocus.com/archive/1/529589