VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 20, 2003· Updated Jun 16, 2026

CVE-2003-0728

CVE-2003-0728

Description

Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL.

Affected products

2
  • Horde (software)/Horde2 versions
    cpe:2.3:a:horde:horde:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:horde:horde:*:*:*:*:*:*:*:*range: <=2.2.4
    • (no CPE)range: <2.2.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.