CVE-2007-1679

The CVE-2007-1679 entry concerns multiple XSS vulnerabilities in Horde Groupware Webmail 1.0, specifically in imp/search.php and ingo/rule.php. The issue is that remote authenticated users can inject script/HTML via unspecified vectors; however, the vendor disputes the existence of the search.php...

PT-2007-3049 · Horde · Horde Groupware Webmail

Name of the Vulnerable Software and Affected Versions: Horde Groupware Webmail version 1.0 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in th...

WEBO (Web ORGanizer) 1.0 - 'baseDir' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV67$2007 ----------------------------------------------------------------------------------------- ECHOADV67$2007 WEBO Web Organizer = 1.0 baseDir Remote File Inclusion Vulnerability...

Horde Groupware Calendar组件本地文件包含漏洞

Horde Groupware Calendar是一款基于PHP的WEB应用程序。 Horde Groupware Calendar不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行查看系统文件内容。 Horde Groupware Webmail Edition 1.0-RC2 Horde Groupware 1.0-RC3 厂商解决方案 升级程序： Horde Groupware 1.0-RC3 Horde horde-groupware-1.0.tar.gz...

CVE-2007-0579

Unspecified vulnerability in the calendar component in Horde Groupware Webmail Edition before 1.0, and Groupware before 1.0, allows remote attackers to include certain files via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2007-0579

CVE-2007-0579 affects Horde Groupware Webmail Edition before 1.0 and Groupware before 1.0. Unspecified vulnerability in the calendar component allows remote attackers to include certain files via unspecified vectors. No further technical details or remediation are provided in the accessible docum...

CVE-2007-0579

Unspecified vulnerability in the calendar component in Horde Groupware Webmail Edition before 1.0, and Groupware before 1.0, allows remote attackers to include certain files via unspecified vectors. NOTE: some of these details are obtained from third party information...

Aratix <= 0.2.2b11 (inc/init.inc.php) Remote File Include Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + Aratix = 0.2.2b11 inc/init.inc.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- +...

Aratix <= 0.2.2b11 (inc/init.inc.php) Remote File Include Vulnerability

+------------------------------------------------------------------------------------------- + Aratix = 0.2.2b11 inc/init.inc.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendor ............:...

Aratix <= 0.2.2b11 (inc/init.inc.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Aratix 16: include $currentpath . 'inc/session.inc.php'; + - 17: include $currentpath . 'inc/pages.inc.php'; + - 18: include $currentpath . 'inc/modules.inc.php'; + -...

Aratix 0.2.2b11 - incinit.inc.php Remote File Inclusion

Aratix 0.2.2b11 - incinit.inc.php Remote File Inclusion +------------------------------------------------------------------------------------------- + Aratix +------------------------------------------------------------------------------------------- + Details: + Aratix inc/init.inc.php does not...

Debian DSA-1016-1 : evolution - format string vulnerabilities

Ulf Harnhammar discovered several format string vulnerabilities in Evolution, a free groupware suite, that could lead to crashes of the application or the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2006-3237

Cross-site scripting XSS vulnerability in index.php in Enterprise Groupware System EGS 1.2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the module parameter...

CVE-2006-3237

The CVE-2006-3237 entry describes a Cross-site scripting (XSS) flaw in the Enterprise Groupware System (EGS) before or at version 1.2.4, exploitable via the module parameter on index.php. The underlying issue is an input handling/reflective scripting vector that allows remote attackers to inject ...

CVE-2006-2635

CVE-2006-2635 (and related entries) describe multiple cross-site scripting (XSS) vulnerabilities in Tikiwiki/Tiki CMS/Groupware 1.9.x. The enriched records from connected sources confirm concrete details: the issues affect tiki-remind_password.php and a wide set of other PHP scripts (e.g., tiki-l...

Design/Logic Flaw

Unspecified vulnerability in Sybase Pylon Anywhere groupware synchronization server before 7.0 allows local users to obtain sensitive information such as email and PIM data of another user via unknown attack vectors...

CVE-2006-1997

Unspecified vulnerability in Sybase Pylon Anywhere groupware synchronization server before 7.0 allows local users to obtain sensitive information such as email and PIM data of another user via unknown attack vectors...

CVE-2006-1997

The CVE-2006-1997 entry concerns Sybase Pylon Anywhere groupware synchronization server prior to version 7.0. The vulnerability is an unspecified issue that enables local users to access sensitive information (email and PIM data) belonging to another user via unknown attack vectors. The available...

PhpGroupWare Main Screen Message Script Injection Flaw

The remote host seems to be running PhpGroupWare, is a multi-user groupware suite written in PHP. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

egs_10rc4_php5_incl_xpl.php.txt

--------EGS Enterprise Groupware System 1.0 rc4 possibly prior versions------- remote code execution -------------------------------------------------------------------------------- software: site: http://egs.sourceforge.net/ description: "EGS is an Open Source business system released under the...