CVE-2004-1383

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

phpgroupware

sql injection

security

vulnerability

nvd

8.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.3%

JSON

Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to execute arbitrary SQL statements via the (1) order, (2) project_id, (3) pro_main, or (4) hours_id parameters to index.php or (5) ticket_id to viewticket_details.php.

CPENameOperatorVersion
phpgroupware:phpgroupwarephpgroupwareeq0.9.14.003
phpgroupware:phpgroupwarephpgroupwareeq0.9.13
phpgroupware:phpgroupwarephpgroupwareeq0.9.14.005
phpgroupware:phpgroupwarephpgroupwareeq0.9.14.006
phpgroupware:phpgroupwarephpgroupwareeq0.9.12
phpgroupware:phpgroupwarephpgroupwareeq0.9.14
phpgroupware:phpgroupwarephpgroupwareeq0.9.16.000
phpgroupware:phpgroupwarephpgroupwareeq0.9.16.003
phpgroupware:phpgroupwarephpgroupwareeq0.9.16_rc1
phpgroupware:phpgroupwarephpgroupwareeq0.9.16.002

CPE	Name	Operator	Version
phpgroupware:phpgroupware	phpgroupware	eq	0.9.14.003
phpgroupware:phpgroupware	phpgroupware	eq	0.9.13
phpgroupware:phpgroupware	phpgroupware	eq	0.9.14.005
phpgroupware:phpgroupware	phpgroupware	eq	0.9.14.006
phpgroupware:phpgroupware	phpgroupware	eq	0.9.12
phpgroupware:phpgroupware	phpgroupware	eq	0.9.14
phpgroupware:phpgroupware	phpgroupware	eq	0.9.16.000
phpgroupware:phpgroupware	phpgroupware	eq	0.9.16.003
phpgroupware:phpgroupware	phpgroupware	eq	0.9.16_rc1
phpgroupware:phpgroupware	phpgroupware	eq	0.9.16.002