Security Advisory

CVE-2007-6018

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-01-11 02:00:00

Last updated 2024-08-07 15:54:25

Assigner flexera

CVSS score not scored

State PUBLISHED

Description

IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) "purge" deleted emails via a crafted email message.

← Browse all CVEs View on cve.org ↗