Beveiligingsadvies

CVE-2007-6018

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2008-01-11 02:00:00
Laatst bijgewerkt 2024-08-07 15:54:25
Toegewezen door flexera
CVSS-score geen score
Status PUBLISHED

Beschrijving

IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) "purge" deleted emails via a crafted email message.