Vulnerabilities > Horde > Horde Image API > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2017-09-21 | CVE-2017-14650 | Improper Input Validation vulnerability in Horde Image API A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. | 8.1 |
2017-06-21 | CVE-2017-9774 | Code Injection vulnerability in Horde Image API Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a crafted GET request. | 8.8 |