[Tickets #14926] Re: Horde Webmail - XSS + CSRF to SQLi, RCE, Stealing Emails <= v5.2.22

[email protected] Tue, 29 Oct 2019 12:13:03 +0000

Newsgroups	gmane.comp.horde.bugs
Message-ID	<[email protected]>
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