<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 26 Oct 2026 05:44:56 +0000</lastBuildDate>
    <item>
      <title>certa-2009-avi-552 — Une vulnérabilité permettant l'injection de code indirecte dans des
produits Horde a été corrigée.</title>
      <link>https://cve.radiocsirt.org/vuln/certa-2009-avi-552</link>
      <description>certa-2009-avi-552</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certa-2009-avi-552</guid>
    </item>
    <item>
      <title>EUVD-2026-124308</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-124308</link>
      <description>EUVD-2026-124308</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-124308</guid>
    </item>
    <item>
      <title>fkie_cve-2009-3701</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2009-3701</link>
      <description>&lt;p&gt;Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) phpshell.php, (2) cmdshell.php, or (3) sqlshell.php in admin/, related to the PHP_SELF variable.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) phpshell.php, (2) cmdshell.php, or (3) sqlshell.php in admin/, related to the PHP_SELF variable.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2009-3701</guid>
    </item>
    <item>
      <title>GHSA-pfm3-37qv-rm2q</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-pfm3-37qv-rm2q</link>
      <description>&lt;p&gt;Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) phpshell.php, (2) cmdshell.php, or (3) sqlshell.php in admin/, related to the PHP_SELF variable.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) phpshell.php, (2) cmdshell.php, or (3) sqlshell.php in admin/, related to the PHP_SELF variable.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-pfm3-37qv-rm2q</guid>
    </item>
    <item>
      <title>gsd-2009-3701</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2009-3701</link>
      <description>gsd-2009-3701</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2009-3701</guid>
    </item>
  </channel>
</rss>
