CVE-2006-1260

None

CVSS

—

EPSS

12.5%

Published

Mar 19, 2006

CISA due date

—

The record

Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check.

Affected packages

Ecosystem	Package	Introduced	Fixed
Debian:3.1	horde2	0	2.2.8-1sarge2
Debian:3.1	horde3	0	3.0.4-4sarge3

Related vulnerabilities

CVE-2006-1491 Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10… Also affects horde2