Evil-DB LogoEvil-DB
← All CVEs

CVE-2009-0932

medium · 6.4

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Horde_Image driver name.

6.4
CVSS
45.8%
EPSS (exploit prob.)
99th
EPSS percentile
2009-03-17
Published

AV:N/AC:L/Au:N/C:P/I:P/A:N

Weaknesses

CWE-22

Affected products

VendorProductAffected versions
debianhorde3.2
debianhorde3.2.2
debianhorde3.2.3
debianhorde3.3
debianhorde3.3.1
debianhorde3.3.2
debianhorde_groupware1.1.1
debianhorde_groupware1.1.2
debianhorde_groupware1.1.3
debianhorde_groupware1.1.4

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-0932