Gentoo Security Advisory GLSA 200812-20 (phpcollab)

The remote host is missing updates announced in advisory GLSA 200812-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200812-20 (phpcollab)

The remote host is missing updates announced in advisory GLSA 200812-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200812-20 : phpCollab: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200812-20 phpCollab: Multiple vulnerabilities Multiple vulnerabilities have been found in phpCollab: rgod reported that data sent to general/sendpassword.php via the loginForm parameter is not properly sanitized before being used ...

phpCollab: Multiple vulnerabilities

Background phpCollab is a web-enabled groupware and project management software written in PHP. It uses SQL-based database backends. Description Multiple vulnerabilities have been found in phpCollab: rgod reported that data sent to general/sendpassword.php via the loginForm parameter is not...

CVE-2006-1495

SQL injection vulnerability in general/sendpassword.php in 1 PHPCollab 2.4 and 2.5.rc3, and 2 NetOffice 2.5.3-pl1 and 2.6.0b2 allows remote attackers to execute arbitrary SQL commands via the loginForm parameter in the "forgotten password" option...

Sql injection

SQL injection vulnerability in general/sendpassword.php in 1 PHPCollab 2.4 and 2.5.rc3, and 2 NetOffice 2.5.3-pl1 and 2.6.0b2 allows remote attackers to execute arbitrary SQL commands via the loginForm parameter in the "forgotten password" option...

CVE-2006-1495

SQL injection vulnerability in general/sendpassword.php in 1 PHPCollab 2.4 and 2.5.rc3, and 2 NetOffice 2.5.3-pl1 and 2.6.0b2 allows remote attackers to execute arbitrary SQL commands via the loginForm parameter in the "forgotten password" option...

CVE-2006-1495

CVE-2006-1495 describes an SQL injection in general/sendpassword.php (forgotten password flow) affecting PHPCollab 2.4 and 2.5.rc3, and NetOffice 2.5.3-pl1 and 2.6.0b2. The issue stems from unsanitized loginForm input used in an SQL statement, enabling remote attackers to execute arbitrary SQL co...

CVE-2006-1495: Undefined Security Weakness

SQL injection vulnerability in general/sendpassword.php in 1 PHPCollab 2.4 and 2.5.rc3, and 2 NetOffice 2.5.3-pl1 and 2.6.0b2 allows remote attackers to execute arbitrary SQL commands via the loginForm parameter in the "forgotten password" option...

PHPCollab 2.x / NetOffice 2.x (sendpassword.php) SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================================== PHPCollab 2.x / NetOffice 2.x sendpassword.php SQL Injection Exploit ====================================================================== !/usr/bin/php -q -d...

PHPCollab 2.x / NetOffice 2.x - 'sendpassword.php' SQL Injection

!/usr/bin/php -q -d shortopentag=on works with magicquotesgpc = Off\r\n\r\n"; echo "a googledork: intitle:phpcollab|netoffice "index of" -www-apps -php-collab.org -ext:xml\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0." host path email OPTIONS\r\n"; echo "host: target server ip/hostname\r\n";...

PHPCollab 2.x / NetOffice 2.x (sendpassword.php) SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "PHPCollab v2.x / NetOffice v2.x sendpassword.php SQL Injection \r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "- works with magicquotesgpc = Off\r\n\r\n"; echo "...