267 matches found
[SECURITY] [DSA 419-1] New phpgroupware packages fix unintended PHP execution and SQL injection
-------------------------------------------------------------------------- Debian Security Advisory DSA 419-1 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 419-1] New phpgroupware packages fix unintended PHP execution and SQL injection
-------------------------------------------------------------------------- Debian Security Advisory DSA 419-1 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2003 http://www.debian.org/security/faq -...
[Full-Disclosure] [SECURITY] [DSA 419-1] New phpgroupware packages fix unintended PHP execution and SQL injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 419-1 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2003 http://www.debian.org/security/faq -...
DSA-419 phpgroupware - missing filename sanitising, SQL injection
Bulletin has no description...
CVE-2003-0657
Multiple SQL injection vulnerabilities in the infolog module for phpgroupware 0.9.14 and earlier could allow remote attackers to conduct unauthorized database actions...
CVE-2003-0599
Unknown vulnerability in the Virtual File System VFS capability for phpGroupWare 0.9.16preRC and versions before 0.9.14.004 with unknown implications, related to the VFS path being under the web document root...
CVE-2003-0657
CVE-2003-0657 covers multiple SQL injection vulnerabilities in the infolog module of phpgroupware
CVE-2003-0657
Multiple SQL injection vulnerabilities in the infolog module for phpgroupware 0.9.14 and earlier could allow remote attackers to conduct unauthorized database actions...
[SECURITY] [DSA-365-1] New phpgroupware package fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 365-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 5th, 2003 http://www.debian.org/security/faq -...
CVE-2003-0599
Unknown vulnerability in the Virtual File System VFS capability for phpGroupWare 0.9.16preRC and versions before 0.9.14.004 with unknown implications, related to the VFS path being under the web document root...
CVE-2003-0599
CVE-2003-0599 concerns phpGroupWare (0.9.16preRC and all versions before 0.9.14.004). The vulnerability lies in the Virtual File System (VFS) capability, with the root cause described as the VFS path being under the web document root, and implications are stated as unknown. The advisory lists a h...
CVE-2003-0504
PhpGroupWare (0.9.14.003, also known as webdistro) is affected by CVE-2003-0504 due to multiple HTML injection/XSS vulnerabilities in the addressbook module (e.g., index.php). The OpenVAS and Debian advisories confirm this issue and reference a need to update phpgroupware to resolve it. Root caus...
CVE-2003-0504
Multiple cross-site scripting XSS vulnerabilities in Phpgroupware 0.9.14.003 aka webdistro allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to index.php in the addressbook module...
kereval.phpgroup.txt
================================================= Kereval Security Advisory KSA-003 Cross Site Scripting Vulnerability in Phpgroupware ================================================= PROGRAM: Phpgroupware HOMEPAGE: http://www.phpgroupware.org/ VULNERABLE VERSIONS: 0.9.14.003 RISK: Low/Medium...
[KSA-003] Cross Site Scripting Vulnerability in Phpgroupware
================================================= Kereval Security Advisory KSA-003 Cross Site Scripting Vulnerability in Phpgroupware ================================================= PROGRAM: Phpgroupware HOMEPAGE: http://www.phpgroupware.org/ VULNERABLE VERSIONS: 0.9.14.003 RISK: Low/Medium...
CVE-2002-0536
This CVE affects PHPGroupware 0.9.12 and earlier. When magic_quotes_gpc is disabled, remote attackers can perform a SQL injection to compromise the database. The issue is caused by insufficient input handling in the affected PHPGroupware deployment, enabling unauthorized access to database data. ...
CVE-2002-0536
PHPGroupware 0.9.12 and earlier, when running with the magicquotesgpc feature disabled, allows remote attackers to compromise the database via a SQL injection attack...
CVE-2002-0536
PHPGroupware 0.9.12 and earlier, when running with the magicquotesgpc feature disabled, allows remote attackers to compromise the database via a SQL injection attack...
SQL injection in PHPGroupware
Preface PHPGroupware is a Groupware application written in PHP. It provides a framework of applications like calendar, ToDo list, notes, HR management, that come with PHPGroupware as well as an API to write new applications. All data is stored in an SQL database. + Problem PHPGroupware 0.9.12 the...