Description
Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL.
References
- 20030813 PCL-0001: Remote Vulnerability in HORDE MTA < 2.2.4 mailing-list
- 20030901 GLSA: horde (200309-02) mailing-list