Gentoo Linux Security Advisory GLSA 200604-02 – Jan Schneider of the Horde team discovered a vulnerability in the help viewer of the Horde Application Framework that could allow remote code execution (CVE-2006-1491). Paul Craig reported that services/go.php fails to validate the passed URL parameter correctly (CVE-2006-1260). Versions less than 3.1.1 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45247/glsa-200604-02.txt
Source: https://packetstormsecurity.com/files/45247/Gentoo-Linux-Security-Advisory-200604-2.html