Evil-DB LogoEvil-DB
← All CVEs

CVE-2006-1491

high · 7.5

Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer.

7.5
CVSS
39.2%
EPSS (exploit prob.)
99th
EPSS percentile
2006-03-29
Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

CWE-94

Affected products

VendorProductAffected versions
hordeapplication_framework3.0
hordeapplication_framework3.0.1
hordeapplication_framework3.0.2
hordeapplication_framework3.0.3
hordeapplication_framework3.0.4
hordeapplication_framework3.0.4_rc1
hordeapplication_framework3.0.4_rc2
hordeapplication_framework3.0.6
hordeapplication_framework3.0.7
hordeapplication_framework3.0.8
hordeapplication_framework3.0.9
hordeapplication_framework3.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2006-1491