Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-7984

Multiple cross-site request forgery (CSRF) vulnerabilities in Horde before 5.2.8, Horde Groupware before 5.2.11, and Horde Groupware Webmail Edition before 5.2.11 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary (1) commands via the cmd parameter to admin/cmdshell.php, (2) SQL queries via the sql parameter to admin/sqlshell.php, or (3) PHP code via the php parameter to admin/phpshell.php.

Security Impact Summary

CVE-2015-7984 is a security vulnerability that . Impacting 3 products from horde, from horde, from debian organizations running these solutions should prioritize assessment and patching.

Historical Context

First disclosed in 2015, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.

Published

2015-11-19T20:59:09.223

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

8.6

Impact Score

6.4

Weaknesses

Type: Primary
CWE-352

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	horde	groupware	< 5.2.11	Yes
Application	horde	groupware	< 5.2.11	Yes
Application	horde	horde_application_framework	< 5.2.8	Yes
Operating System	debian	debian_linux	8.0	Yes

References

http://lists.horde.org/archives/announce/2015/001124.html Vendor Advisory ([email protected])
http://lists.horde.org/archives/announce/2015/001137.html Vendor Advisory ([email protected])
http://lists.horde.org/archives/announce/2015/001138.html Vendor Advisory ([email protected])
http://www.debian.org/security/2015/dsa-3391 Third Party Advisory ([email protected])
https://www.exploit-db.com/exploits/38765/ Third Party Advisory, VDB Entry ([email protected])
https://www.htbridge.com/advisory/HTB23272 Exploit ([email protected])
http://lists.horde.org/archives/announce/2015/001124.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.horde.org/archives/announce/2015/001137.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.horde.org/archives/announce/2015/001138.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2015/dsa-3391 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.exploit-db.com/exploits/38765/ Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.htbridge.com/advisory/HTB23272 Exploit (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For horde's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.