Unrated severityNVD Advisory· Published Sep 25, 2012· Updated Apr 29, 2026
CVE-2012-0209
CVE-2012-0209
Description
Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2012, contains an externally introduced modification (Trojan Horse) in templates/javascript/open_calendar.js, which allows remote attackers to execute arbitrary PHP code.
Affected products
3cpe:2.3:a:horde:groupware:1.2.10:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:horde:groupware:1.2.10:*:*:*:*:*:*:*
- cpe:2.3:a:horde:groupware:1.2.10:*:webmail:*:*:*:*:*
- cpe:2.3:a:horde:horde:3.3.12:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- bugzilla.redhat.com/show_bug.cginvdPatch
- dev.horde.org/h/jonah/stories/view.phpnvdExploitPatchVendor Advisory
- eromang.zataz.com/2012/02/15/cve-2012-0209-horde-backdoor-analysis/nvdExploit
- lists.horde.org/archives/announce/2012/000751.htmlnvdExploitPatch
- packetstormsecurity.org/files/109874/Horde-3.3.12-Backdoor-Arbitrary-PHP-Code-Execution.htmlnvdExploit
News mentions
0No linked articles in our index yet.