Debian Security Advisory DSA 1519-1 (horde3)

The remote host is missing an update to horde3 announced via advisory DSA 1519-1. OpenVAS Vulnerability Test $Id: deb15191.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1519-1 horde3 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1519-1 : horde3 - insufficient input sanitising

It was discovered that the Horde web application framework permits arbitrary file inclusion by a remote attacker through the theme preference parameter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...