Lucene search
+L

CVE-2004-1385

🗓️ 06 Feb 2005 05:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 59 Views🌐 WEB

phpGroupWare 0.9.16.003 allows remote information disclosure via session ID and parameters

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
cvelist
Cvelist
CVE-2004-1385
6 Feb 200505:00
cvelist
exploitdb
Exploit DB
phpGroupWare 0.9.x - 'index.php' Multiple SQL Injections
15 Dec 200400:00
exploitdb
euvd
EUVD
EUVD-2004-1382
7 Oct 202500:30
euvd
nessus
Tenable Nessus
GLSA-200501-08 : phpGroupWare: Various vulnerabilities
14 Feb 200500:00
nessus
nessus
Tenable Nessus
phpGroupWare <= 0.9.16.003 Multiple Vulnerabilities
16 Dec 200400:00
nessus
gentoo
Gentoo Linux
phpGroupWare: Various vulnerabilities
6 Jan 200500:00
gentoo
nvd
NVD
CVE-2004-1385
31 Dec 200405:00
nvd
openvas
OpenVAS
Gentoo Security Advisory GLSA 200501-08 (phpgroupware)
24 Sep 200800:00
openvas
openvas
OpenVAS
Gentoo Security Advisory GLSA 200501-08 (phpgroupware)
24 Sep 200800:00
openvas
ubuntucve
UbuntuCve
CVE-2004-1385
31 Dec 200405:00
ubuntucve
Rows per page
ParameterPositionPathDescriptionCWE
menuactionquery paramphpgroupware/index.php?menuaction=todo.ui.show_list&order=[SQL_Q UERY]&sort=ASC&filter=&qfield=&start=&query=SQL injection and input validation issues via menuaction/order/query parameters in the list view.CWE-89CWE-79
orderquery paramphpgroupware/index.php?menuaction=todo.ui.show_list&order=[SQL_Q UERY]&sort=ASC&filter=&qfield=&start=&query=SQL injection and input validation issues via menuaction/order/query parameters in the list view.CWE-89CWE-79
sortquery paramphpgroupware/index.php?menuaction=todo.ui.show_list&order=[SQL_Q UERY]&sort=ASC&filter=&qfield=&start=&query=SQL injection and input validation issues via menuaction/order/query parameters in the list view.CWE-89CWE-79
filterquery paramphpgroupware/index.php?menuaction=todo.ui.show_list&order=[SQL_Q UERY]&sort=ASC&filter=&qfield=&start=&query=SQL injection and input validation issues via menuaction/order/query parameters in the list view.CWE-89CWE-79
qfieldquery paramphpgroupware/index.php?menuaction=todo.ui.show_list&order=[SQL_Q UERY]&sort=ASC&filter=&qfield=&start=&query=SQL injection and input validation issues via menuaction/order/query parameters in the list view.CWE-89CWE-79
startquery paramphpgroupware/index.php?menuaction=todo.ui.show_list&order=[SQL_Q UERY]&sort=ASC&filter=&qfield=&start=&query=SQL injection and input validation issues via menuaction/order/query parameters in the list view.CWE-89CWE-79
queryquery paramphpgroupware/index.php?menuaction=todo.ui.show_list&order=[SQL_Q UERY]&sort=ASC&filter=&qfield=&start=&query=SQL injection and input validation issues via menuaction/order/query parameters in the list view.CWE-89CWE-79
menuactionquery paramphpgroupware/index.php?menuaction=projects.uiprojects.list_projects&order=[SQL_QUERY]&sort=ASC&filter=&qfield=&start=&query=&pro_main=&action=mainsSQL injection and input validation issues via multiple parameters in the list_projects view.CWE-89CWE-79
orderquery paramphpgroupware/index.php?menuaction=projects.uiprojects.list_projects&order=[SQL_QUERY]&sort=ASC&filter=&qfield=&start=&query=&pro_main=&action=mainsSQL injection and input validation issues via multiple parameters in the list_projects view.CWE-89CWE-79
sortquery paramphpgroupware/index.php?menuaction=projects.uiprojects.list_projects&order=[SQL_QUERY]&sort=ASC&filter=&qfield=&start=&query=&pro_main=&action=mainsSQL injection and input validation issues via multiple parameters in the list_projects view.CWE-89CWE-79
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 22:07Current
6.5Medium risk
Vulners AI Score6.5
CVSS 25
EPSS0.07324
59