VDB
CVE-2009-0932
CVE-2009-0932
PUBLISHED
KEV
CVSS 6.400000095367432 MEDIUM
Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Horde_Image driver name.
EPSS 5.61% · 90.5th percentile
Risk Scores
CVSS 2.0
6.400000095367432
EPSS Score
5.61%
90.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| debian | horde | 3.2, 3.2.2, 3.2.3 |
| debian | horde_groupware | 1.1.3, 1.1.4, 1.1.2 |
| n/a | n/a | n/a |
Timeline
- CVE Published
- Feb 11, 2011 PoC Published
- Feb 12, 2011 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 17, 2025 EPSS Score
- Mar 18, 2025 EPSS Score
- Mar 23, 2025 EPSS Score
- Mar 26, 2025 EPSS Score
- Mar 28, 2025 EPSS Score
- Mar 29, 2025 EPSS Score
- Mar 30, 2025 EPSS Score
References
- [announce] 20090127 Horde Groupware 1.1.5 (final) mailing-list
- SUSE-SR:2009:007 vendor-advisory
- http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503 url
- 33491 vdb
- 33695 third-party-advisory
- [announce] 20090127 Horde 3.2.4 (final) mailing-list
- 34418 third-party-advisory
- [announce] 20090127 Horde 3.3.3 (final) mailing-list
- http://cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5 url
- http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5 url
- 34609 third-party-advisory
- 8077 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2009-0932 advisory