Group-Office Calendar SQL Injection

/------------------------------------- | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection vulnerability located in the calendar module. A PHP file...

Group Office Calendar - calendarjson.php SQL Injection

Group Office Calendar - calendarjson.php SQL Injection /-------------------------------------\ | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection...

Group Office Calendar - '/calendar/json.php' SQL Injection

/-------------------------------------\ | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection vulnerability located in the calendar module. A PHP...

Group-Office Calendar 4.0.88 SQL Injection Vulnerability

Exploit for php platform in category web applications /-------------------------------------\ | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection...

Group-Office Calendar 4.0.88 SQL Injection

/-------------------------------------\ | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection vulnerability located in the calendar module. A PHP...

Group-Office Cleartext Credentials Stored in Cookies

/------------------------------------------------------ | Group-Office Cleartext Credentials Stored in Cookies | ------------------------------------------------------/ Summary ======= Group-Office 4.0.71 was found to display a behaviour that could potentially expose a user's username and clearte...

Group Office v3.6.5 - Multiple Web Vulnerabilities

Document Title: =============== Group Office v3.6.5 - Multiple Web Vulnerabilities References Source: ==================== Group Office v3.6.5, v3.6.4, v3.6.3 & older versions Release Date: ============= 2011-08-13 Vulnerability Laboratory ID VL-ID: ==================================== 117 Produc...

Group Office v3.6.5 - Multiple Web Vulnerabilities

Document Title: =============== Group Office v3.6.5 - Multiple Web Vulnerabilities References Source: ==================== Group Office v3.6.5, v3.6.4, v3.6.3 & older versions Release Date: ============= 2011-08-13 Vulnerability Laboratory ID VL-ID: ==================================== 117 Produc...

Group-Office命令注入和SQL注入漏洞

Bugtraq ID: 48941 CNCAN ID：CNCAN-2011080103 Group-Office是一个基于Web的办公套件，其功能包括用户管理、模块管理、邮件客户端、 文件管理器、日程、项目管理以及客户关系管理等等。 Group-Office存在多个安全漏洞，允许攻击者进行SQL注入攻击或以WEB权限执行任意命令。 -部分未明输入在用于SQL查询时缺少正确过滤，攻击者可以利用漏洞注入任意SQL操作数据库或获得敏感信息。 -部分输入在使用之前缺少过滤，攻击者可以利用漏洞注入和执行任意命令。 Intermesh Group-Office 3.7.23 厂商解决方案...

CVE-2010-3428

SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a category action...

Sql injection

SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a category action...

CVE-2010-3428

CVE-2010-3428 affects Intermesh Group-Office 3.5.9. The vulnerability is an SQL injection in the file modules/notes/json.php, exploitable via the category_id parameter in a category action. This allows remote attackers to manipulate the database (arbitrary SQL commands) without authentication, as...

CVE-2010-3428

SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a category action...

Group-Office 'modules/notes/json.php' SQL Injection Vulnerability

Group-Office is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to execute arbitrary code, compromise the application, access or modify data, or exploit latent...

Group-Office Detection

This host is running Group-Office, a PHP based dual license commercial/open source groupware product developed by Dutch company Intermesh. OpenVAS Vulnerability Test $Id: gbgroupofficedetect.nasl 5723 2017-03-24 15:46:34Z cfi $ Group-Office Detection Authors: Michael Meyer Copyright: Copyright c...

Group-Office Detection (HTTP)

This host is running Group-Office, a PHP based dual license commercial/open source groupware product developed by Dutch company Intermesh. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Group-Office 'modules/notes/json.php' SQL Injection Vulnerability

Group-Office is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respectiv...

Group Office 3.5.9 - SQL Injection

Group Office 3.5.9 - SQL Injection ===================================================================================== Group Office /notes/json.php?task=category&categoryid SQL Injection Vulnerability ===================================================================================== Author :...

Group Office 3.5.9 - SQL Injection

===================================================================================== Group Office /notes/json.php?task=category&categoryid SQL Injection Vulnerability ===================================================================================== Author : ViciOuS Author Web Page...

Group Office 3.5.9 SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== Group Office 3.5.9 SQL Injection Vulnerability ============================================== Author : ViciOuS Author Web Page :http://www.sabotaj.in Email : viciousatsabotaj.in Script Page :...