[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKl9ysrrAsBJ276zA-DSTdhFuRPDyLoCWN3x_xIJSZng":3,"g5a-risk:CVE-2009-3236":279},{"success":4,"data":5,"meta":277},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":28,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":100,"references":101,"referencesCount":164,"weaknesses":165,"weaknessesCount":169,"isActivelyExploited":31,"cisaInfo":28,"otxData":28,"relatedBlogPosts":170,"seoMetadata":171,"configurations":196,"relatedVendorCves":275,"notableEvents":276},"CVE-2009-3236","What is CVE-2009-3236?","The form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before 1.1.6 and 1.2 before 1.2.4; reuses temporary filenames during the upload process which allows remote attackers, with privileges to write to the address book, to overwrite arbitrary files and execute PHP code via crafted Horde_Form_Type_image form field elements.","The form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail...","2009-09-17T10:30:01.36","2026-06-16T23:11:12.133",4.3,"AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":32},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":24,"ExploitabilityScore":29,"ImpactScore":30,"ACInsufInfo":31,"ObtainAllPrivilege":31,"ObtainUserPrivilege":31,"ObtainOtherPrivilege":31,"UserInteractionRequired":31},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":25,"IntegrityImpact":26,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","MEDIUM","NONE","PARTIAL","",null,8.6,2.9,false,[],0.02305,[33,33,33,33,33,33,33],"Medium",[37,42,45,48,51,54,57,60,63,66,69,73,76,79,82,85,88,91,94,97],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"horde","application_framework","3.2","cpe:2.3:a:horde:application_framework:3.2:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":43,"criteria":44,"vulnerable":4},"3.2.1","cpe:2.3:a:horde:application_framework:3.2.1:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":46,"criteria":47,"vulnerable":4},"3.2.2","cpe:2.3:a:horde:application_framework:3.2.2:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":49,"criteria":50,"vulnerable":4},"3.2.3","cpe:2.3:a:horde:application_framework:3.2.3:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":52,"criteria":53,"vulnerable":4},"3.2.4","cpe:2.3:a:horde:application_framework:3.2.4:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":55,"criteria":56,"vulnerable":4},"3.3","cpe:2.3:a:horde:application_framework:3.3:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":58,"criteria":59,"vulnerable":4},"3.3.1","cpe:2.3:a:horde:application_framework:3.3.1:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":61,"criteria":62,"vulnerable":4},"3.3.2","cpe:2.3:a:horde:application_framework:3.3.2:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":64,"criteria":65,"vulnerable":4},"3.3.3","cpe:2.3:a:horde:application_framework:3.3.3:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":67,"criteria":68,"vulnerable":4},"3.3.4","cpe:2.3:a:horde:application_framework:3.3.4:*:*:*:*:*:*:*",{"vendor":38,"product":70,"version":71,"criteria":72,"vulnerable":4},"groupware","1.1","cpe:2.3:a:horde:groupware:1.1:*:*:*:*:*:*:*",{"vendor":38,"product":70,"version":74,"criteria":75,"vulnerable":4},"1.1.1","cpe:2.3:a:horde:groupware:1.1.1:*:*:*:*:*:*:*",{"vendor":38,"product":70,"version":77,"criteria":78,"vulnerable":4},"1.1.2","cpe:2.3:a:horde:groupware:1.1.2:*:*:*:*:*:*:*",{"vendor":38,"product":70,"version":80,"criteria":81,"vulnerable":4},"1.1.3","cpe:2.3:a:horde:groupware:1.1.3:*:*:*:*:*:*:*",{"vendor":38,"product":70,"version":83,"criteria":84,"vulnerable":4},"1.1.4","cpe:2.3:a:horde:groupware:1.1.4:*:*:*:*:*:*:*",{"vendor":38,"product":70,"version":86,"criteria":87,"vulnerable":4},"1.1.5","cpe:2.3:a:horde:groupware:1.1.5:*:*:*:*:*:*:*",{"vendor":38,"product":70,"version":89,"criteria":90,"vulnerable":4},"1.2","cpe:2.3:a:horde:groupware:1.2:*:*:*:*:*:*:*",{"vendor":38,"product":70,"version":92,"criteria":93,"vulnerable":4},"1.2.1","cpe:2.3:a:horde:groupware:1.2.1:*:*:*:*:*:*:*",{"vendor":38,"product":70,"version":95,"criteria":96,"vulnerable":4},"1.2.2","cpe:2.3:a:horde:groupware:1.2.2:*:*:*:*:*:*:*",{"vendor":38,"product":70,"version":98,"criteria":99,"vulnerable":4},"1.2.3","cpe:2.3:a:horde:groupware:1.2.3:*:*:*:*:*:*:*",20,[102,107,110,113,116,119,122,127,130,134,138,142,144,146,148,150,152,154,156,158,160,162],{"url":103,"source":104,"tags":105},"http:\u002F\u002Fmarc.info\u002F?l=horde-announce&m=125291625030436&w=2","Marc",[106],"Patch",{"url":108,"source":104,"tags":109},"http:\u002F\u002Fmarc.info\u002F?l=horde-announce&m=125292088004087&w=2",[106],{"url":111,"source":104,"tags":112},"http:\u002F\u002Fmarc.info\u002F?l=horde-announce&m=125292314007049&w=2",[106],{"url":114,"source":104,"tags":115},"http:\u002F\u002Fmarc.info\u002F?l=horde-announce&m=125292339907481&w=2",[106],{"url":117,"source":104,"tags":118},"http:\u002F\u002Fmarc.info\u002F?l=horde-announce&m=125294558611682&w=2",[106],{"url":120,"source":104,"tags":121},"http:\u002F\u002Fmarc.info\u002F?l=horde-announce&m=125295852706029&w=2",[106],{"url":123,"source":124,"tags":125},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36665","Secunia",[126],"Vendor Advisory",{"url":128,"source":124,"tags":129},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36882",[126],{"url":131,"source":132,"tags":133},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2009\u002Fdsa-1897","Debian",[],{"url":135,"source":136,"tags":137},"http:\u002F\u002Fwww.osvdb.org\u002F58107","Osvdb",[],{"url":139,"source":140,"tags":141},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F53202","Ibmcloud",[],{"url":103,"source":104,"tags":143},[106],{"url":108,"source":104,"tags":145},[106],{"url":111,"source":104,"tags":147},[106],{"url":114,"source":104,"tags":149},[106],{"url":117,"source":104,"tags":151},[106],{"url":120,"source":104,"tags":153},[106],{"url":123,"source":124,"tags":155},[126],{"url":128,"source":124,"tags":157},[126],{"url":131,"source":132,"tags":159},[],{"url":135,"source":136,"tags":161},[],{"url":139,"source":140,"tags":163},[],22,[166],{"id":167,"name":167,"description":168},"Unknown","NVD-CWE-noinfo",1,[],{"title":172,"metaDescription":173,"keywords":174,"canonicalUrl":175,"structuredData":176},"What is CVE-2009-3236? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2009-3236, a medium severity cyber security vulnerability from 2009. The form library in Horde Application Framework 3.2 before...","CVE-2009-3236, CVE-2009-3236 vulnerability, CVE-2009-3236 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, horde security, application_framework vulnerability","\u002Fwhat-is\u002Fcve-2009-3236",{"@context":177,"@type":178,"headline":172,"description":173,"datePublished":10,"dateModified":11,"author":179,"publisher":183,"about":187,"mainEntityOfPage":191,"articleSection":194,"keywords":195},"https:\u002F\u002Fschema.org","TechArticle",{"@type":180,"name":181,"url":182},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":180,"name":181,"url":182,"logo":184},{"@type":185,"url":186},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":188,"name":6,"description":189,"additionalType":190},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":192,"@id":193},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2009-3236","Cybersecurity","CVE-2009-3236, CVE-2009-3236 vulnerability, CVE-2009-3236 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[197,245],{"Operator":28,"Negate":28,"Nodes":198},[199],{"Operator":200,"Negate":31,"CPEMatch":201},"OR",[202,204,206,208,210,212,214,216,218,220,222,224,226,228,230,232,234,236,239,241,243],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":203,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"D1F91CDA-B425-4DB2-89E4-12267B600D13",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":205,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"7A8BB743-A760-4C72-880C-759E54FB7CF1",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":207,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"89477FCC-C925-418A-A3FF-F5B02736600C",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":209,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"D5862181-4CE7-452F-8877-41E099440188",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":211,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"B3E601FE-94F1-48AD-A0F2-42824A3A4FC1",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":213,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"BDE2B06C-EDBD-4FA1-90AA-148E39EF5AE4",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":215,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"D5CF33A8-C497-4C86-8C5D-7181597BEC53",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":217,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"30B312DB-14BE-425C-9B07-0CBED6F39E2F",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":219,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"A2CF2865-CA12-4C4C-9BEC-7A97E6AAB377",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":221,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"DF389AE4-D2AD-4992-BFBD-68FB1CBEE50B",{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":223,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"C6BBB036-494E-41D4-BD04-40906FAB5C60",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":225,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"1C10E681-5D2B-4EA4-B8E1-C0CA4FC9D3FB",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":227,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"19CC5154-42C5-4877-9147-5DFD61BD5CDC",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":229,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"62AAEBBF-1696-4EAC-8837-68A03C2D2F5F",{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":231,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"F626876D-99FC-4DE0-BEE0-35874C4E25F7",{"Vulnerable":4,"Criteria":87,"MatchCriteriaID":233,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"A849DD3E-882A-4621-BB6C-315A76677BB9",{"Vulnerable":4,"Criteria":90,"MatchCriteriaID":235,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"AB711B5E-9011-4BA2-917A-DB8545705E23",{"Vulnerable":4,"Criteria":237,"MatchCriteriaID":238,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:horde:groupware:1.2:rc1:*:*:*:*:*:*","50DC1068-F426-497F-A5A0-E032BC3816F8",{"Vulnerable":4,"Criteria":93,"MatchCriteriaID":240,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"F2C5A176-8C72-40EA-85AC-F11B40FD53A3",{"Vulnerable":4,"Criteria":96,"MatchCriteriaID":242,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"CB4C3487-4556-47E5-8BF3-1DEDF0E9AFEC",{"Vulnerable":4,"Criteria":99,"MatchCriteriaID":244,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"78F24E43-491B-4AD1-B905-66F7FC6DA98D",{"Operator":28,"Negate":28,"Nodes":246},[247],{"Operator":200,"Negate":31,"CPEMatch":248},[249,250,253,256,259,262,263,264,265,266,267,268,269,270,271,272],{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":223,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},{"Vulnerable":4,"Criteria":251,"MatchCriteriaID":252,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:horde:groupware:1.1:rc1:*:*:*:*:*:*","37B76B27-ADF0-4E88-B92C-304FB38A356E",{"Vulnerable":4,"Criteria":254,"MatchCriteriaID":255,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:horde:groupware:1.1:rc2:*:*:*:*:*:*","965F245A-879A-4DF0-ABC5-588E78C4CBBD",{"Vulnerable":4,"Criteria":257,"MatchCriteriaID":258,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:horde:groupware:1.1:rc3:*:*:*:*:*:*","3DCB29F9-3875-4264-8117-5751FEDC3350",{"Vulnerable":4,"Criteria":260,"MatchCriteriaID":261,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:horde:groupware:1.1:rc4:*:*:*:*:*:*","59FC250F-EF0B-4604-99A2-3EEB8B2DEB77",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":225,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":227,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":229,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":231,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},{"Vulnerable":4,"Criteria":87,"MatchCriteriaID":233,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},{"Vulnerable":4,"Criteria":90,"MatchCriteriaID":235,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},{"Vulnerable":4,"Criteria":237,"MatchCriteriaID":238,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},{"Vulnerable":4,"Criteria":93,"MatchCriteriaID":240,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},{"Vulnerable":4,"Criteria":96,"MatchCriteriaID":242,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},{"Vulnerable":4,"Criteria":99,"MatchCriteriaID":244,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},{"Vulnerable":4,"Criteria":273,"MatchCriteriaID":274,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:horde:groupware:1.2.3:rc1:*:*:*:*:*:*","F577A169-8354-4218-B3C6-04DA4BDF1E3C",[],[],{"lastModified":11,"cacheTime":278,"version":22},1792372400027,{"score":280,"band":281,"action":282,"scoredAt":283},16,"Info","Track","2026-10-17T06:36:51.783596+00:00"]