📦

passwd

Vendor: horde

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 2 Code Available
Total RCEs 0 Remote Access
Total CVEs 4 Total Indexed
Avg. EPSS 2.48% Exploit Prob.
Latest CVE CVE-2009-2360 Jul 08

Security Vulnerability Index

Page 1 / 1
4.3 CVSS
CVE-2009-2360
Exploit Found

Cross-site scripting (XSS) vulnerability in passwd/main.php in the Passwd module before 3.1.1 for Horde allows remote attackers to inject arbitrary web script or HTML via the backend parameter.

EPSS: 5.06%
4.3 CVSS
CVE-2005-1313

Cross-site scripting (XSS) vulnerability in Horde Passwd module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.

EPSS: 1.20%
5.0 CVSS
CVE-2000-0492
Exploit Found

PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords.

EPSS: 1.19%