{"vulnerability": "CVE-2020-8518", "sightings": [{"uuid": "a87c6e39-276c-48bc-af20-2ad01295076c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8518", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "43f9ce77-8576-4267-b5c1-004eb4aadd7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8518", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:31.000000Z"}, {"uuid": "a33ffe39-3373-4f99-b416-18aae9bf3ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8518", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/horde_csv_rce.rb", "content": "", "creation_timestamp": "2020-03-23T12:42:56.000000Z"}, {"uuid": "d7ac4603-5870-443b-871a-6025c42f4ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8518", "type": "exploited", "source": "https://t.me/CyberSecurityTechnologies/795", "content": "#exploit\nCVE-2020-8518:\nHorde Groupware Webmail Edition 5.2.22 - RCE in CSV data import (manual/shell exploits + metasploit module)\nhttps://cardaci.xyz/advisories/2020/03/10/horde-groupware-webmail-edition-5.2.22-rce-in-csv-data-import/\n]-> SSD publishes the\u00a0advisory:\nhttps://ssd-disclosure.com/archives/4097/ssd-advisory-horde-groupware-webmail-edition-remote-code-execution", "creation_timestamp": "2024-02-06T15:08:35.000000Z"}, {"uuid": "bbc18b5b-67cc-4769-9fb2-83a3d574d55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8518", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/horde_csv_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Andrea Cardaci \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"The Horde_Data module version 2.1.4 (and before) present in Horde\\n          Groupware version 5.2.22 allows authenticated users to inject\\n          arbitrary PHP code thus achieving RCE on the server hosting the web\\n          application.\", \"disclosure_date\": \"2020-02-07\", \"fullname\": \"exploit/multi/http/horde_csv_rce\", \"is_install_path\": true, \"mod_time\": \"2023-02-10 18:04:31 +0000\", \"name\": \"Horde CSV import arbitrary PHP code execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/horde_csv_rce.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/horde_csv_rce\", \"references\": [\"CVE-2020-8518\", \"URL-https://cardaci.xyz/advisories/2020/03/10/horde-groupware-webmail-edition-5.2.22-rce-in-csv-data-import/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:49.782571Z"}]}