CVE-2013-6275

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2013-10/0134.htmlBroken Link
http://www.exploit-db.com/exploits/29274Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/63377Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1029285Third Party Advisory, VDB Entry
https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-6275Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/88321Third Party Advisory, VDB Entry
https://security-tracker.debian.org/tracker/CVE-2013-6275Third Party Advisory
http://archives.neohapsis.com/archives/bugtraq/2013-10/0134.htmlBroken Link
http://www.exploit-db.com/exploits/29274Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/63377Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1029285Third Party Advisory, VDB Entry
https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-6275Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/88321Third Party Advisory, VDB Entry
https://security-tracker.debian.org/tracker/CVE-2013-6275Third Party Advisory

Timeline

Published: Nov 5, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-62769.8QNAP F_VioCard 2312 and F_VioGate 2308 have hardcoded entries in authorized_keys files. NOTE: 1. All active models are not affected. The las CVE-2013-62777.5QNAP VioCard 300 has hardcoded RSA private keys.CVE-2013-62804.3Cross-site scripting (XSS) vulnerability in Social Sharing Toolkit plugin before 2.1.2 for WordPress allows remote attackers to inject arbit CVE-2013-62814.3Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet (dhtmlxSpreadsheet) plugin 2.0 for WordPress allows CVE-2013-62828.8The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain add CVE-2013-62837.5VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code CVE-2013-62847.5Unspecified vulnerability in the Statutory Reporting for Insurance (FS_SR) component in the Financial Services module for SAP ERP Central Co CVE-2013-62855.0The search component in the Treasurer application in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to obtain sensitive query-st CVE-2013-628810.0Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors,CVE-2013-62894.3Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inj CVE-2013-62959.8PrestaShop 1.5.5 vulnerable to privilege escalation via a Salesman account via upload module CVE-2013-62993.5Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Se