CVE-2023-25292

Group-Office (Intermesh BV) has a Reflected XSS in version 6.6.145 where the GO_LANGUAGE cookie can be manipulated to inject script, potentially exposing sensitive data and enabling privilege escalation. Root cause: improper handling/encoding of the GO_LANGUAGE cookie leads to reflected script in...

Group-Office命令注入和SQL注入漏洞

Bugtraq ID: 48941 CNCAN ID：CNCAN-2011080103 Group-Office是一个基于Web的办公套件，其功能包括用户管理、模块管理、邮件客户端、 文件管理器、日程、项目管理以及客户关系管理等等。 Group-Office存在多个安全漏洞，允许攻击者进行SQL注入攻击或以WEB权限执行任意命令。 -部分未明输入在用于SQL查询时缺少正确过滤，攻击者可以利用漏洞注入任意SQL操作数据库或获得敏感信息。 -部分输入在使用之前缺少过滤，攻击者可以利用漏洞注入和执行任意命令。 Intermesh Group-Office 3.7.23 厂商解决方案...

CVE-2010-3428

SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a category action...

Sql injection

SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a category action...

CVE-2010-3428

CVE-2010-3428 affects Intermesh Group-Office 3.5.9. The vulnerability is an SQL injection in the file modules/notes/json.php, exploitable via the category_id parameter in a category action. This allows remote attackers to manipulate the database (arbitrary SQL commands) without authentication, as...

Group-Office Detection

This host is running Group-Office, a PHP based dual license commercial/open source groupware product developed by Dutch company Intermesh. OpenVAS Vulnerability Test $Id: gbgroupofficedetect.nasl 5723 2017-03-24 15:46:34Z cfi $ Group-Office Detection Authors: Michael Meyer Copyright: Copyright c...

Group-Office Detection (HTTP)

This host is running Group-Office, a PHP based dual license commercial/open source groupware product developed by Dutch company Intermesh. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...