CVE-2009-3236

CVE-2009-3236 describes a vulnerability in the form library of Horde Application Framework, Groupware, and Groupware Webmail Edition, where temporary filenames are reused during file uploads. This flaw allows authenticated attackers with address book write privileges to overwrite arbitrary files and execute PHP code through specially crafted image form fields. The vulnerability has a CVSS score of 4.3, indicating a medium attack complexity and potential for partial integrity impact, but no confidentiality or availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.