EGroupware Multiple Vulnerabilities (May 2011) - Active Check

EGroupware is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:egroupware:egroupware";...

CVE-2010-4949

creationtimestamp| type| source ---|---|--- 2010-07-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34374...

Microsoft Office .pptx Files Detection

Binary data 4949.prm...

CVE-2008-4949

dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cil, b /tmp/pdo, and c /tmp/pdn temporary files, related to the 1 patcil and 2 patdiff scripts...

CVE-2008-4949

dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cil, b /tmp/pdo, and c /tmp/pdn temporary files, related to the 1 patcil and 2 patdiff scripts...

CVE-2008-4949

CVE-2008-4949 affects dist 3.5. Local users can overwrite arbitrary files via a symlink attack on temporary files /tmp/cil#####, /tmp/pdo#####, and /tmp/pdn#####, related to the patcil and patdiff scripts. Root cause is a symlink-based race in handling these temporary files. The description does ...

CVE-2007-4949

Multiple PHP remote file inclusion vulnerabilities in phpReactor 1.2.7pl1 allow remote attackers to execute arbitrary PHP code via a URL in the pathtohomedir parameter to 1 ekilat.com-int.tpl.php, 2 phpreactor.org-top.tpl.php, or 3 ekilat.com-top.tpl.php in examples/. NOTE: this issue has been...

CVE-2007-4949

The CVE-2007-4949 entry describes multiple PHP remote file inclusion issues in phpReactor 1.2.7pl1 where remote code execution could occur via a URL in the pathtohomedir parameter to certain files (ekilat.com-int.tpl.php, phpreactor.org-top.tpl.php, ekilat.com-top.tpl.php) located in the examples...

CVE-2006-4949

Cross-site scripting XSS vulnerability in the Drupal 4.6 Site Profile Directory profilepages.module before 1.1.2.1 and the Drupal 4.7 Site Profile Directory profilepages.module before 1.2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack o...

CVE-2006-4949

Drupal 4.6 Site Profile Directory (profile_pages.module) before 1.1.2.1 and Drupal 4.7 Site Profile Directory (profile_pages.module) before 1.2.2.1 contain an XSS vulnerability caused by lack of output validation, potentially in the name and title parameters. Remote attackers could inject arbitra...