Unscored DSA-1033-1 3 CVEs

horde3 - several vulnerabilities

Published Apr 12, 2006 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.1	horde3	3.0.4-4sarge3

Vulnerabilities 3

Unscored —

CVE-2005-4190

Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework before 3.0.8 allow remote authentica…

Dec 13, 2005
Unscored —

CVE-2006-1260 Public exploit EPSS 12%

Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url param…

Mar 19, 2006
Unscored —

CVE-2006-1491 Public exploit EPSS 39%

Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remo…

Mar 29, 2006