DSA-798-1 phpgroupware - several

Bulletin has no description...

CVE-2005-2761

Cross-site scripting XSS vulnerability in phpGroupWare 0.9.16.000 allows administrators to inject arbitrary web script or HTML by modifying the main screen message...

CVE-2005-2761

Cross-site scripting XSS vulnerability in phpGroupWare 0.9.16.000 allows administrators to inject arbitrary web script or HTML by modifying the main screen message...

CVE-2005-2761

phpGroupWare suffers a global XSS in the main screen message (CVE-2005-2761). Affected: PhpGroupWare 0.9.16.000 era (and related components like Addressbook

phpGroupWare: Multiple vulnerabilities

Background phpGroupWare is a multi-user groupware suite written in PHP. Description phpGroupWare improperly validates the "mid" parameter retrieved via a forum post. The current version of phpGroupWare also adds several safeguards to prevent XSS issues, and disables the use of a potentially...

security flaw

Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier PEAR XML-RPC for PHP, as used in multiple products including 1 Drupal, 2 phpAdsNew, 3 phpPgAds, and 4 phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be...

CVE-2004-2406

CVE-2004-2406 – summary: The vulnerability concerns an overflow in the phpgw_config table within phpGroupWare, reported for versions before 0.9.14.002. The connected records confirm the component (phpGroupWare) and the affected version boundary (prior to 0.9.14.002), but neither the exact root ca...

CVE-2004-2406

Unknown "overflow" in the phpgwconfig table for phpGroupWare before 0.9.14.002 has unknown attack vectors and impact...

CVE-2004-2407

Unknown vulnerability in phpGroupWare before 0.9.14.002 has unknown attack vectors and impact, related to a "security hole" in the Setup/Config functionality...

CVE-2004-2407

Technical details about CVE-2004-2407 are not publicly provided in the supplied documents. No concrete affected product/version, vector, impact, or remediation is documented here. Monitor for official disclosures and updates from vendors and security authorities.

CVE-2005-2498

Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier PEAR XML-RPC for PHP, as used in multiple products including 1 Drupal, 2 phpAdsNew, 3 phpPgAds, and 4 phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be...

CVE-2005-2498

PHPXMLRPC

SUSE-SA:2005:041: php/pear XML::RPC

The remote host is missing the patch for the advisory SUSE-SA:2005:041 php/pear XML::RPC. A bug in the PEAR::XMLRPC library allowed remote attackers to pass arbitrary PHP code to the eval function. The updated php packages fix the XML::RPC bug, however several third party PHP packages include a...

[SECURITY] [DSA 746-1] New packages fix remote command execution in phpgroupware

------------------------------------------------------------------------ Debian Security Advisory DSA 746-1 [email protected] http://www.debian.org/security/ Michael Stone July 13, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 746-1] New packages fix remote command execution in phpgroupware

------------------------------------------------------------------------ Debian Security Advisory DSA 746-1 [email protected] http://www.debian.org/security/ Michael Stone July 13, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

Debian DSA-746-1 : phpgroupware - input validation error

A vulnerability had been identified in the xmlrpc library included with phpgroupware, a web-based application including email, calendar and other groupware functionality. This vulnerability could lead to the execution of arbitrary commands on the server running phpgroupware. The security team is...

DSA-746-1 phpgroupware - remote command execution

Bulletin has no description...

FreeBSD : phpgroupware (2041)

The following package needs to be updated: phpgroupware %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF,...

FreeBSD : phpgroupware (1929)

The following package needs to be updated: phpgroupware %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF,...

FreeBSD : phpgroupware (1767)

The following package needs to be updated: phpgroupware %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF,...