Published: 19/03/2006 Updated: 18/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Horde Application Framework 3.0.9 allows remote malicious users to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check.

Vulnerable Product	Search on Vulmon	Subscribe to Product
horde horde 1.2.2
horde horde 1.2.3
horde horde 2.1
horde horde 2.1.3
horde horde 2.2.6
horde horde 2.2.7
horde horde 2.2.8
horde horde 3.0.4_rc1
horde horde 3.0.4_rc2
horde horde 1.2.4
horde horde 1.2.5
horde horde 2.2
horde horde 2.2.1
horde horde 2.2.9
horde horde 3.0
horde horde 3.0.6
horde horde 3.0.7
horde horde 1.2
horde horde 1.2.1
horde horde 1.2.8
horde horde 2.0
horde horde 2.2.4_rc1
horde horde 2.2.5
horde horde 3.0.3
horde horde 3.0.4
horde horde 1.2.6
horde horde 1.2.7
horde horde 2.2.3
horde horde 2.2.4
horde horde 3.0.1
horde horde 3.0.2
horde horde 3.0.8
horde horde 3.0.9

Several remote vulnerabilities have been discovered in the Horde web application framework, which may lead to the execution of arbitrary web script code The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-1260 Null characters in the URL parameter bypass a sanity check, which allowed remote attacker ...

Several remote vulnerabilities have been discovered in the Horde web application framework, which may lead to the execution of arbitrary web script code The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-4190 Several Cross-Site-Scripting vulnerabilities have been discovered in the "share edit wind ...

----[ Horde Web-Mail Remote File Disclosure ITDefenceru Antichatru ] Horde Web-Mail Remote File Disclosure Eugene Minaev underwater@itdefenceru ___________________________________________________________________ ____/ __ __ _______________________ _______ _______________ \ \ \ / \ / /_// // / ...

NVD-CWE-Other http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043657.html http://www.securityfocus.com/bid/17117 http://www.osvdb.org/23918 http://securitytracker.com/id?1015771 http://secunia.com/advisories/19246 http://www.gentoo.org/security/en/glsa/glsa-200604-02.xml http://secunia.com/advisories/19528 http://www.debian.org/security/2006/dsa-1033 http://secunia.com/advisories/19619 http://www.novell.com/linux/security/advisories/2006_04_28.html http://secunia.com/advisories/19897 http://www.debian.org/security/2006/dsa-1034 http://secunia.com/advisories/19692 http://securityreason.com/securityalert/590 http://www.vupen.com/english/advisories/2006/0959 https://exchange.xforce.ibmcloud.com/vulnerabilities/25239 http://www.securityfocus.com/archive/1/427710/100/0/threaded https://nvd.nist.gov https://www.debian.org/security/./dsa-1034 https://www.exploit-db.com/exploits/4850/

CVE-2006-1260

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect