← Vulnerability feed

Vulnerability record · CVE-2008-1284 · published 11 March 2008

CVE-2008-1284: Horde groupware path traversal vulnerability

Horde · Groupware

Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, when running with certain configurations, allows remote authenticated users to read and execute arbitrary files via ".." sequences and a null byte in the theme name.

6.0 CVSS 2.0 Medium EPSS 1.7% · top 24.0% CWE-22 · Path traversal
6.0CVSS 2.0 base score
1.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
34References
16 Jun 2026Last modified by NVD

Description

Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, when running with certain configurations, allows remote authenticated users to read and execute arbitrary files via ".." sequences and a null byte in the theme name.

AV:N/AC:M/Au:S/C:P/I:P/A:P

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.horde.org/archives/announce/2008/000382.html Patch
http://lists.horde.org/archives/announce/2008/000383.html
http://lists.horde.org/archives/announce/2008/000384.html
http://secunia.com/advisories/29286 Vendor Advisory
http://secunia.com/advisories/29374 Vendor Advisory
http://secunia.com/advisories/29400 Vendor Advisory
http://secunia.com/advisories/30047 Vendor Advisory
http://security.gentoo.org/glsa/glsa-200805-01.xml
http://securityreason.com/securityalert/3726
http://www.debian.org/security/2008/dsa-1519
http://www.securityfocus.com/archive/1/489239/100/0/threaded
http://www.securityfocus.com/archive/1/489289/100/0/threaded
http://www.securityfocus.com/bid/28153 Patch
http://www.vupen.com/english/advisories/2008/0822/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41054
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00253.html
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00301.html
http://lists.horde.org/archives/announce/2008/000382.html Patch
http://lists.horde.org/archives/announce/2008/000383.html
http://lists.horde.org/archives/announce/2008/000384.html
http://secunia.com/advisories/29286 Vendor Advisory
http://secunia.com/advisories/29374 Vendor Advisory
http://secunia.com/advisories/29400 Vendor Advisory
http://secunia.com/advisories/30047 Vendor Advisory
http://security.gentoo.org/glsa/glsa-200805-01.xml
http://securityreason.com/securityalert/3726
http://www.debian.org/security/2008/dsa-1519
http://www.securityfocus.com/archive/1/489239/100/0/threaded
http://www.securityfocus.com/archive/1/489289/100/0/threaded
http://www.securityfocus.com/bid/28153 Patch
http://www.vupen.com/english/advisories/2008/0822/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41054
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00253.html
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00301.html

Track CVE-2008-1284 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-7218Horde groupware vulnerabilityUnspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2 before 2.2-…EPSS 2.2%10.0CVE-2008-7219Horde groupware permissions and access controls vulnerabilityHorde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 befo…EPSS 2.7%10.0CVE-2005-3344Horde vulnerabilityThe default installation of Horde 3.0.4 contains an administrative account with a blank password, which allows remote attackers to gain access.EPSS 8.0%9.8CVE-2020-8518Horde Groupware Webmail CSV import PHP code injectionHorde Groupware Webmail Edition 5.2.22 permits injection of arbitrary PHP code through CSV data, resulting in remote code execution. The flaw is a co…EPSS 72%analysed9.0CVE-2008-3650Horde groupware webmail edition vulnerabilityMultiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and attack vectors related to "unesc…EPSS 1.0%8.8CVE-2013-6364Horde groupware cross-site scripting vulnerabilityHorde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address bookEPSS 2.1%8.8CVE-2019-12095Horde groupware cross-site scripting vulnerabilityHorde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows CSRF, as demonstrated by the treanBookmarkTags para…EPSS 1.1%8.8CVE-2019-9858Horde groupware path traversal vulnerabilityRemote code execution was discovered in Horde Groupware Webmail 5.2.22 and 5.2.17. Horde/Form/Type.php contains a vulnerable class that handles image…EPSS 19%

Source: NIST National Vulnerability Database (record CVE-2008-1284), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.