Vulnerability in Horde Horde_application_framework
CVE-2006-3549
services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict its image proxy capability, which allows remote attackers to perform "Web tunneling" attacks and use the server as a pro…
EPSS: 0.024 (81.9th percentile) — read the EPSS interpretation.
Affected products
- Horde Horde_application_framework — versions 3.0.0, 3.0.1, 3.0.2
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (Exploit, x_refsource_MISC)