CVE-2015-7984

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Horde before 5.2.8, Horde Groupware before 5.2.11, and Horde Groupware Webmail Edition before 5.2.11 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary (1) commands via the cmd parameter to admin/cmdshell.php, (2) SQL queries via the sql parameter to admin/sqlshell.php, or (3) PHP code via the php parameter to admin/phpshell.php.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.horde.org/archives/announce/2015/001124.htmlVendor Advisory
http://lists.horde.org/archives/announce/2015/001137.htmlVendor Advisory
http://lists.horde.org/archives/announce/2015/001138.htmlVendor Advisory
http://www.debian.org/security/2015/dsa-3391Third Party Advisory
https://www.exploit-db.com/exploits/38765/Third Party Advisory, VDB Entry
https://www.htbridge.com/advisory/HTB23272Exploit
http://lists.horde.org/archives/announce/2015/001124.htmlVendor Advisory
http://lists.horde.org/archives/announce/2015/001137.htmlVendor Advisory
http://lists.horde.org/archives/announce/2015/001138.htmlVendor Advisory
http://www.debian.org/security/2015/dsa-3391Third Party Advisory
https://www.exploit-db.com/exploits/38765/Third Party Advisory, VDB Entry
https://www.htbridge.com/advisory/HTB23272Exploit

Timeline

Published: Nov 19, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-79857.2Valve Steam 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder, which allows local users to gain privileges via CVE-2015-79867.5The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service (memor CVE-2015-79879.8Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vec CVE-2015-79889.8The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial CVE-2015-79895.4Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitr CVE-2015-79905.8Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of ser CVE-2015-79915.0The Web Dispatcher service in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to read web dispatcher and security trace CVE-2015-79924.0SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to cause a denial of service (memory corruption and indexserv CVE-2015-79937.5The Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to execute a CVE-2015-79947.5The SQL interface in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to execute arbitrary code via unspecified vectors CVE-2015-79955.0The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to c CVE-2015-79965.0The Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.