Eval Injection Vulnerability in Horde Application Framework
CVE-2006-1491

Currently unrated

Key Information:

Vendor

Horde

Status
Application Framework
Vendor
CVE Published:
29 March 2006

What is CVE-2006-1491?

An Eval injection vulnerability exists within the Horde Application Framework that allows remote attackers to execute arbitrary code due to improper input validation in the help viewer. This flaw impacts versions 3.0 prior to 3.0.10 and 3.1 prior to 3.1.1, potentially compromising the integrity and confidentiality of affected systems.

References

http://www.gentoo.org/security/en/glsa/glsa-200604-02.xml
vendor-advisoryx_refsource_GENTOO
http://www.debian.org/security/2006/dsa-1034
vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/17292
vdb-entryx_refsource_BID

EPSS Score

38% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.