CVE-2013-6275
MEDIUMHorde Groupware < 5.1.2 - Cross-Site Request Forgery in basic.php
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-6275. PoCs published by Marcela Benetrix.
AI-analyzed exploit summary This exploit demonstrates a CSRF vulnerability in Horde Groupware Webmail Edition 5.1.2, allowing an attacker to create, update, enable, or delete email filtering rules without user interaction. The PoC includes a crafted HTML form that submits malicious rule configurations to the vulnerable endpoint.
Description
Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.
Exploits (1)
This exploit demonstrates a CSRF vulnerability in Horde Groupware Webmail Edition 5.1.2, allowing an attacker to create, update, enable, or delete email filtering rules without user interaction. The PoC includes a crafted HTML form that submits malicious rule configurations to the vulnerable endpoint.
References (7)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N