Skip to content
Fencer Intel
high 7.5

CVE-2012-0209 in the critical feed json

Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February…

published 2012-09-25 14 y ago modified 2026-06-16 4 mo ago also EUVD-2012-0247

cvss
7.5
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
71.9%
EPSS 71.9% chance of exploitation in 30 days, percentile 99.4%
public exploits
2
Metasploit, Exploit-DB

Summary

Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2012, contains an externally introduced modification (Trojan Horse) in templates/javascript/open_calendar.js, which allows remote attackers to execute arbitrary PHP code.

Patch / fix

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2012-0209 updated cvss 6.4

Horde 3.3.12 backdoor found in source code

  • Red Hat All currently supported Red Hat products
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Timeline

  1. First public exploit (Metasploit exploit/multi/http/horde_href_backdoor)
  2. Published

Exploit prediction

71.90% chance of exploitation in the next 30 days, higher than 99.4% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • Metasploit exploit/multi/http/horde_href_backdoor Horde 3.3.12 Backdoor Arbitrary PHP Code Execution metasploit exploit, excellent rank, 2012-02-13
  • EDB-18492 Horde 3.3.12 - Backdoor Arbitrary PHP Code Execution (Metasploit) remote, 2012-02-17
  • dev.horde.org http://dev.horde.org/h/jonah/stories/view.php?channel_id=1&id=155 referenced PoC, tagged "exploit" by a source, unverified
  • lists.horde.org http://lists.horde.org/archives/announce/2012/000751.html referenced PoC, tagged "exploit" by a source, unverified
  • eromang.zataz.com http://eromang.zataz.com/2012/02/15/cve-2012-0209-horde-backdoor-analysis/ referenced PoC, tagged "exploit" by a source, unverified
  • packetstormsecurity.org http://packetstormsecurity.org/files/109874/Horde-3.3.12-Backdoor-Arbitrary-PHP-Code-Execution.html referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-94 Improper Control of Generation of Code

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.