$ cve CVE-2009-3701 JSON

CVE-2009-3701 EXPLOIT

4.3

MEDIUM · CVSS 2.0 · EPSS 4.8% (pctl 92)

Patch early

A public exploit exists.

Description

Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) phpshell.php, (2) cmdshell.php, or (3) sqlshell.php in admin/, related to the PHP_SELF variable.

Scoring

CVSS	4.3 (MEDIUM, v2.0)
Vector	AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS	4.83% — more likely to be exploited than 92% of all CVEs
Weakness	CWE-79
On CISA KEV	no
Public exploit	yes
Published	2009-12-21
Last modified	2026-06-16

Affected (2)

Vendor	Product
horde	application framework
horde	groupware

Public exploits

Source	Title	Date
exploit-db	Horde 3.3.5 - 'PHP_SELF' Cross-Site Scripting	2009-12-17
exploit-db	Horde 3.3.5 - Cross-Site Scripting	2009-12-15
exploit-db	Horde 3.3.5 - '/Administration Interface admin/cmdshell.php?PATH_INFO' Cross-Site Scripting	2009-12-15
exploit-db	Horde 3.3.5 - '/Administration Interface admin/sqlshell.php?PATH_INFO' Cross-Site Scripting	2009-12-15

References

→ the Explorer · watch your stack · NVD