Showing 3 vulnerabilities on this page for imp

Signals CISA KEV Ransomware Nuclei
Horde vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

Horde IMP < 7.0.1 Path Traversal via Compose.php img src

Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server filesystem by embedding traversal sequences after a CKEditor path prefix in img src URLs. Attackers can bypass the stripos() prefix validation by appending sequences such as traversal segments after the matching prefix, causing file_get_contents() to read sensitive files whose contents are then exfiltrated as MIME parts in outgoing email; u

CWE-22Jul 1, 2026
CVSS7.1v4.0EPSS0.409%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

horde imp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account takeover via a crafted text/html e-mail message with an onerror attribute (that may use base64-encoded JavaScript code), as exploited in the wild in March 2025.

CWE-79Mar 21, 2025
CVSS7.2v3.1EPSS30.2%PoCs1SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spelling.php3, and (4) ldap.search.php3?ldap_serv=nonsense which leaks the information in error messages.

CWE-219Jul 14, 2005
CVSS5.3v3.1EPSS1.92%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX