Unscored DSA-1034-1 2 CVEs

horde2 - several vulnerabilities

Published Apr 14, 2006 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.1	horde2	2.2.8-1sarge2

Vulnerabilities 2

Unscored —

CVE-2006-1260 Public exploit EPSS 12%

Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url param…

Mar 19, 2006
Unscored —

CVE-2006-1491 Public exploit EPSS 39%

Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remo…

Mar 29, 2006