Description
Horde Groupware Webmail Edition /imp/test.php 存在远程命令执行漏洞
Horde Groupware Webmail Edition /imp/test.php 远程命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.exploit-db.com/exploits/46136
https://www.acunetix.com/vulnerabilities/web/horde-imp-unauthenticated-remote-command-execution/
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/Horde%20Groupware%20Webmail/Horde%20Groupware%20Webmail%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
http://www.ol4three.com/2020/09/14/WEB/Exploit/Horde-Groupware-Webmail-Edition-%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C/
https://www.cnblogs.com/0day-li/p/13663368.html
https://baizesec.github.io/bylibrary/%E6%BC%8F%E6%B4%9E%E5%BA%93/03-%E4%BA%A7%E5%93%81%E6%BC%8F%E6%B4%9E/Horde%20Groupware/Horde%20Groupware%20Webmail%20Edition%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C/
https://www.sonicwall.com/blog/hackers-actively-scanning-for-horde-imp-vulnerability
https://cardaci.xyz/advisories/2020/03/10/horde-groupware-webmail-edition-5.2.22-rce-in-csv-data-import/
https://github.com/advisories/GHSA-mhgr-3vxf-9f79