CVE-2008-7218 - CVE House

Back to Database

Status published Critical CVE-2008-7218

Unspecified vulnerability in the Horde API in Horde 3.1 before...

10 CVSS

Vulnerability Description

Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2 before 2.2-RC2; Kronolith H3 2.1 before 2.1.7 and H3 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and 2.2 before 2.2-RC2; Horde Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 has unknown impact and attack vectors.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-7218

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from horde

View All →

Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection...

lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an...

An XSS issue was discovered in Horde Groupware Webmail Edition...

Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP...

The image view functionality in Horde Groupware Webmail Edition before...

Affected Vendor

horde

View all reports →

Affected Software

groupware, groupware webmail edition, horde, kronolith h3, mnemo h3, nag h3, turba h3

Vulnerable Versions:

1.0, 1.0.1, 1.0.2, 1.1, 1.0.3, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.2, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.2

Timeline

Official Publish: September 13th, 2009

Last Modified: August 7th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.