Cross-Site Request Forgery and Cross-Site Scripting in Horde Groupware Webmail Edition
CVE-2013-6364
8.8HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2013-6364?
The Horde Groupware Webmail Edition is susceptible to Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS) vulnerabilities when saving search results as a virtual address book. These vulnerabilities may allow attackers to manipulate user actions or inject malicious scripts, thereby compromising the security of user data and the application. It is critical for administrators to apply patches and implement security best practices to safeguard against potential exploitation of these weaknesses.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.