NuytsTech Security

CVE-2006-1491

by ·

Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer.

Date published : 2006-03-29

http://www.securityfocus.com/bid/17292

http://cvs.horde.org/diff.php?f=horde%2Fservices%2Fhelp%2Findex.php&r1=2.85&r2=2.86

Tags: