Track as well php-hord-eturba source package

tuba/search.php is included in the php-horde-turba source package.

Still upstream is unable to confirm the SQL injections issues and the
CVE might be invalid or disputed at least.