CVE-2006-1260

no score yetEPSS 12%

Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check.

EPSS: 12% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
Published: 2006-03-19
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

horde:horde

References

http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043657.html
http://secunia.com/advisories/19246
http://secunia.com/advisories/19528
http://secunia.com/advisories/19619
http://secunia.com/advisories/19692

Check your stack JSON