Local File Inclusion Vulnerability in Horde Internet Messaging Program
CVE-2001-1258

Currently unrated

Key Information:

Vendor: Horde
Status: Imp
Vendor: CVE Published:; 21 July 2001

What is CVE-2001-1258?

The Horde Internet Messaging Program (IMP) version prior to 2.2.6 contains a vulnerability that allows local users to exploit misconfigurations and access sensitive configuration files. By uploading a specially crafted prefs.lang file containing PHP code, attackers can read IMP configuration files and extract the Horde database password. This exposure poses significant risks as it could give malicious actors unauthorized access to critical database information and application functionalities.

References

http://www.iss.net/security_center/static/6906.php

vdb-entryx_refsource_XF

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio...

vendor-advisoryx_refsource_CONECTIVA

http://www.caldera.com/support/security/advisories/CSSA-2...

vendor-advisoryx_refsource_CALDERA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
May 1, 2002
Vulnerability published
Jul 21, 2001

CVE-2001-1258 Data

JSON