Debian: Security Advisory (DSA-898-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1063-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-746-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-419)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 365-1 (phpgroupware)

The remote host is missing an update to phpgroupware announced via advisory DSA 365-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian: Security Advisory (DSA-798-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DTSA-58-1 phpgroupware - cross scripting vulnerability

Bulletin has no description...

PhpGroupWare日历模块class.holidaycalc.inc.php本地文件包含漏洞

phpGroupWare是一个用PHP编写的多用户的网络组件，为开发其他程序提供了一个API。 phpGroupWare在处理用户请求时存在输入验证，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 phpGroupWare的calendar/inc/class.holidaycalc.inc.php脚本没有正确验证phpgwinfouserpreferencescommoncountry参数的输入，远程攻击者可以通过包含本地资源的任意文件导致执行任意代码。成功攻击要求打开了registerglobals且禁用了magicquotesgpc PHPGroupWare...

Debian DSA-1063-1 : phpgroupware - missing input sanitising

It was discovered that the Avatar upload feature of FUD Forum, a component of the web-based groupware system phpgroupware, does not sufficiently validate uploaded files, which might lead to the execution of injected web script code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-898-1 : phpgroupware - programming errors

Several vulnerabilities have been discovered in phpsysinfo, a PHP based host information application that is included in phpgroupware. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-0870 Maksymilian Arciemowicz discovered several cross site scripti...

CVE-2006-4458

Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allows remote attackers to include arbitrary local files via a .. dot dot sequence and trailing null %00 byte in the GLOBALSphpgwinfouserpreferencescommoncountry parameter...

CVE-2006-4458

Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allows remote attackers to include arbitrary local files via a .. dot dot sequence and trailing null %00 byte in the GLOBALSphpgwinfouserpreferencescommoncountry parameter...

CVE-2006-4458

CVE-2006-4458 describes a directory traversal in phpGroupWare up to version 0.9.16.010 where an attacker can cause arbitrary local file inclusion via a crafted GLOBALS[phpgw_info][user][preferences][common][country] parameter containing a .. sequence followed by a null byte (%00). The affected co...

CVE-2006-4458

Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allows remote attackers to include arbitrary local files via a .. dot dot sequence and trailing null %00 byte in the GLOBALSphpgwinfouserpreferencescommoncountry parameter...

phpGroupware.txt

!/usr/bin/php -q -d shortopentag=on calendar/inc/class.holidaycalc.inc.php line 14-33: .... / $Id: class.holidaycalc.inc.php,v 1.5 2001/08/26 12:32:28 skeeter Exp $ / if empty$GLOBALS'phpgwinfo''user''preferences''common''country' $rule = 'US'; else $rule =...

phpGroupWare 0.9.16.010 - GLOBALS[] Remote Code Execution

phpGroupWare 0.9.16.010 - GLOBALS Remote Code Execution !/usr/bin/php -q -d shortopentag=on calendar/inc/class.holidaycalc.inc.php line 14-33: .... / $Id: class.holidaycalc.inc.php,v 1.5 2001/08/26 12:32:28 skeeter Exp $ / if empty$GLOBALS'phpgwinfo''user''preferences''common''country' $rule =...

phpGroupWare <= 0.9.16.010 GLOBALS[] Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? / this works against registerglobals=On and magic quotes = off : /str0ke / / vulnerable code = calendar/inc/class.holidaycalc.inc.php line 14-33: .... / $Id: class.holidaycalc.inc.php,v 1.5 2001/08/26 12:32:28 skeeter Exp $ ...

phpGroupWare <= 0.9.16.010 GLOBALS[] Remote Code Execution Exploit

Exploit for unknown platform in category web applications ================================================================== phpGroupWare calendar/inc/class.holidaycalc.inc.php line 14-33: .... / $Id: class.holidaycalc.inc.php,v 1.5 2001/08/26 12:32:28 skeeter Exp $ / if...

phpGroupWare 0.9.16.010 - 'GLOBALS[]' Remote Code Execution

!/usr/bin/php -q -d shortopentag=on calendar/inc/class.holidaycalc.inc.php line 14-33: .... / $Id: class.holidaycalc.inc.php,v 1.5 2001/08/26 12:32:28 skeeter Exp $ / if empty$GLOBALS'phpgwinfo''user''preferences''common''country' $rule = 'US'; else $rule =...

[SECURITY] [DSA 1063-1] New phpgroupware packages fix execution of arbitrary web script code

-------------------------------------------------------------------------- Debian Security Advisory DSA 1063-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 8th, 2006 http://www.debian.org/security/faq -...