CVE-2006-4458: Undefined Security Weakness

Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allows remote attackers to include arbitrary local files via a .. dot dot sequence and trailing null %00 byte in the GLOBALSphpgwinfouserpreferencescommoncountry parameter...

CVE-2004-2575: Undefined Security Weakness

phpGroupWare 0.9.14.005 and earlier allow remote attackers to obtain sensitive information via a direct request to 1 hookadmin.inc.php, 2 hookhome.inc.php, 3 class.holidaycalc.inc.php, and 4 setup.inc.php.sample, which reveals the path in an error message...