CVE-2006-1260
MEDIUM 5.0EPSS 12.5%
Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check.
- CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 12.45% chance of exploitation in the next 30 days, 96th percentile
- Published
- 2006-03-19
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043657.html
- http://secunia.com/advisories/19246
- http://securitytracker.com/id?1015771
- http://www.osvdb.org/23918
- http://www.securityfocus.com/bid/17117