VULNERABILITY INTELLIGENCE
CVE-2001-1258
CVSS score3.6 LOW
EPSS probability0.46%
CISA KEVNot currently listed
Published2001-07-21
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:N
Description
Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server.