Cross-Site Request Forgery Vulnerabilities in Horde Groupware and Webmail Edition
CVE-2015-7984

Currently unrated

Key Information:

Vendor

Horde

Status
Horde Application Framework
Groupware
Vendor
CVE Published:
19 November 2015

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2015-7984?

Horde Groupware and Webmail Edition are impacted by multiple cross-site request forgery vulnerabilities that can allow remote attackers to hijack the authentication of administrators. This can be achieved by sending crafted requests through the cmd parameter in admin/cmdshell.php, the sql parameter in admin/sqlshell.php, or the php parameter in admin/phpshell.php, potentially leading to the execution of arbitrary commands, SQL queries, or PHP code.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2015-7984 - Proof of Concept

References

http://lists.horde.org/archives/announce/2015/001124.html
mailing-listx_refsource_MLIST
http://lists.horde.org/archives/announce/2015/001138.html
mailing-listx_refsource_MLIST
https://www.exploit-db.com/exploits/38765/
exploitx_refsource_EXPLOIT-DB

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.