VDB
CVE-2006-1491
CVE-2006-1491
PUBLISHED
CVSS 7.5 HIGH
Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer.
EPSS 39.17% · 98.5th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
39.17%
98.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| horde | application_framework | 3.0, 3.0.3, 3.0.2 |
Timeline
- CVE Published
- Jul 30, 2010 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 3, 2023 EPSS Score
References
- 17292 vdb
- http://cvs.horde.org/diff.php?f=horde%2Fservices%2Fhelp%2Findex.php&r1=2.85&r2=2.86 url
- SUSE-SR:2006:007 vendor-advisory
- ADV-2006-1154 vdb
- 1015841 vdb
- 19485 third-party-advisory
- DSA-1033 vendor-advisory
- http://lists.horde.org/archives/announce/2006/000271.html patch
- http://lists.horde.org/archives/announce/2006/000272.html technical
- http://secunia.com/advisories/19619 advisory
- http://www.attrition.org/pipermail/vim/2006-March/000671.html technical
- http://www.gentoo.org/security/en/glsa/glsa-200604-02.xml technical
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25516 technical
- http://secunia.com/advisories/19528 advisory
- http://secunia.com/advisories/19692 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2006-1491 advisory
- http://secunia.com/advisories/19504 url
- http://www.debian.org/security/2006/dsa-1034 url