CVE-2020-8865

This exploit leverages a file inclusion vulnerability in Horde Webmail to achieve remote code execution by uploading a malicious .inc file to a temporary directory and then including it via a manipulated bookmark block parameter. The exploit chain involves authentication, file upload, and path traversal to trigger the inclusion.

This exploit leverages PHAR deserialization in Horde Webmail to achieve remote code execution by uploading a malicious PHAR file, triggering its deserialization via a syndicated feed block, and executing arbitrary PHP code.