CVE-2006-1260

Опубликовано: 19 мар. 2006

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:horde:horde:1.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:1.2.6:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:1.2.7:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:1.2.8:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:2.0:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:2.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:2.1.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:2.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:2.2.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:2.2.4:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:2.2.4_rc1:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:2.2.5:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:2.2.6:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:2.2.7:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:2.2.8:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:2.2.9:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:3.0:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:3.0.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:3.0.4_rc1:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:3.0.4_rc2:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:3.0.6:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:3.0.7:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:3.0.8:*:*:*:*:*:*:*

cpe:2.3:a:horde:horde:3.0.9:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.23329

Средний

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2006-1260

ubuntu

больше 19 лет назад

Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check.

CVE-2006-1260

debian

больше 19 лет назад

Horde Application Framework 3.0.9 allows remote attackers to read arbi ...

GHSA-wj2h-p5xg-r4jc

github

больше 3 лет назад

Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check.

EPSS

Процентиль: 96%

0.23329

Средний

5 Medium

CVSS2

Дефекты

NVD-CWE-Other