Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before 1.1.6 and 1.2 before 1.2.4; reuses temporary filenames during the upload process which allows remote attackers, with privileges to write to the address book, to overwrite arbitrary files and execute PHP code via crafted Horde_Form_Type_image form field elements.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Horde文件覆盖漏洞
Vulnerability Description
Horde Framework是个以PHP为基础的架构，用于创建网络应用程序。 Horde应用框架3.2.5之前的3.2版本；Groupware 1.1.6之前的1.1版本和1.2.4之前的1.2版本；以及Groupware Webmail Edition 1.1.6之前的1.1版本和1.2.4之前的1.2版本的form库在上传程序过程中重新使用临时文件名。远程攻击者可借助特制Horde_Form_Type_image form字段元素覆盖任意文件并执行PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A