| Package | Affected versions | Patched versions |
|---|---|---|
| horde | = 1.2= 1.2.1= 1.2.2= 1.2.3= 1.2.4= 1.2.5= 1.2.6= 1.2.7= 1.2.8= 2.0= 2.1= 2.1.3= 2.2= 2.2.1= 2.2.3= 2.2.4= 2.2.4_rc1= 2.2.5= 2.2.6= 2.2.7= 2.2.8= 2.2.9= 3.0= 3.0.1= 3.0.2= 3.0.3= 3.0.4= 3.0.4_rc1= 3.0.4_rc2= 3.0.6= 3.0.7= 3.0.8= 3.0.9 |
Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free