Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2014-1691
HistoryApr 01, 2014 - 3:55 p.m.

CVE-2014-1691

2014-04-0115:55:06
CWE-94
mitre
web.nvd.nist.gov
60
cve-2014-1691
remote code execution
object injection
php
security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.941

Percentile

99.2%

JSON

The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via a crafted serialized object in the _formvars form.

Affected configurations

Nvd
Node
hordehorde_application_frameworkRange≤5.1.0
OR
hordehorde_application_frameworkMatch5.0.0
OR
hordehorde_application_frameworkMatch5.0.1
OR
hordehorde_application_frameworkMatch5.0.2
OR
hordehorde_application_frameworkMatch5.0.3
OR
hordehorde_application_frameworkMatch5.0.4
VendorProductVersionCPE
hordehorde_application_framework*cpe:2.3:a:horde:horde_application_framework:*:*:*:*:*:*:*:*
hordehorde_application_framework5.0.0cpe:2.3:a:horde:horde_application_framework:5.0.0:*:*:*:*:*:*:*
hordehorde_application_framework5.0.1cpe:2.3:a:horde:horde_application_framework:5.0.1:*:*:*:*:*:*:*
hordehorde_application_framework5.0.2cpe:2.3:a:horde:horde_application_framework:5.0.2:*:*:*:*:*:*:*
hordehorde_application_framework5.0.3cpe:2.3:a:horde:horde_application_framework:5.0.3:*:*:*:*:*:*:*
hordehorde_application_framework5.0.4cpe:2.3:a:horde:horde_application_framework:5.0.4:*:*:*:*:*:*:*

Related

ubuntucve 1
zdt 1
packetstorm 2
checkpoint_advisories 1
nessus 1
seebug 1
exploitdb 1
debian 1
openvas 3
osv 1
prion 1
metasploit 1
debiancve 1
cvelist 1
securityvulns 2
nvd 1
ubuntucve
ubuntucve
CVE-2014-1691
2014-04-01 00:00:00
zdt
zdt
Horde Framework Unserialize PHP Code Execution
2014-03-22 00:00:00
packetstorm
packetstorm
Horde Framework Unserialize PHP Code Execution
2014-03-20 00:00:00
Horde Framework Unserialize PHP Code Execution
2014-06-29 00:00:00
checkpoint_advisories
checkpoint_advisories
Horde Framework Unserialize PHP Code Execution (CVE-2014-1691)
2014-05-18 00:00:00
nessus
nessus
Debian DSA-2853-1 : horde3 - remote code execution
2014-02-06 00:00:00
seebug
seebug
Horde Framework Unserialize PHP Code Execution
2014-07-01 00:00:00
exploitdb
exploitdb
Horde Framework - Unserialize PHP Code Execution (Metasploit)
2014-03-22 00:00:00
debian
debian
[SECURITY] [DSA 2853-1] horde3 security update
2014-02-05 12:11:46
openvas
openvas
Horde '_formvars' Form Input RCE Vulnerability
2014-03-21 00:00:00
Debian Security Advisory DSA 2853-1 (horde3 - remote code execution)
2014-02-05 00:00:00
Debian: Security Advisory (DSA-2853-1)
2014-02-04 00:00:00
osv
osv
horde3 - Remote code execution
2014-02-05 00:00:00
prion
prion
Design/Logic Flaw
2014-04-01 15:55:00
metasploit
metasploit
Horde Framework Unserialize PHP Code Execution
2014-03-18 01:47:45
debiancve
debiancve
CVE-2014-1691
2014-04-01 15:55:06
cvelist
cvelist
CVE-2014-1691
2014-04-01 15:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2853-1] horde3 security update
2014-02-11 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2014-02-11 00:00:00
nvd
nvd
CVE-2014-1691
2014-04-01 15:55:06

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.941

Percentile

99.2%

JSON
Related for CVE-2014-1691
ubuntucve1zdt1packetstorm2checkpoint_advisories1nessus1seebug1exploitdb1debian1openvas3osv1prion1metasploit1debiancve1cvelist1securityvulns2nvd1