CVE-2011-4948

Directory traversal vulnerability in admin/remote.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to read arbitrary files via a ..%2f encoded dot dot slash in the type parameter...

CVE-2011-4949

SQL injection vulnerability in phpgwapi/js/dhtmlxtree/samples/withdb/loaddetails.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Directory traversal

Directory traversal vulnerability in admin/remote.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to read arbitrary files via a ..%2f encoded dot dot slash in the type parameter...

Sql injection

SQL injection vulnerability in phpgwapi/js/dhtmlxtree/samples/withdb/loaddetails.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in phpgwapi/js/jscalendar/test.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

Open redirect

Open redirect vulnerability in phpgwapi/ntlm/index.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter...

CVE-2011-4951

Open redirect vulnerability in phpgwapi/ntlm/index.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter...

CVE-2011-4949

SQL injection vulnerability in phpgwapi/js/dhtmlxtree/samples/withdb/loaddetails.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-4948

Directory traversal vulnerability in admin/remote.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to read arbitrary files via a ..%2f encoded dot dot slash in the type parameter...

CVE-2011-4951

CVE-2011-4951 describes an open redirect vulnerability in the file path phpgwapi/ntlm/index.php used by EGroupware’s EPL before 11.1.20110804-1 and Community Edition before 1.8.001.20110805. According to the sources, an attacker can pass a URL in the forward parameter to redirect victims to arbit...

CVE-2011-4950

CVE-2011-4950 is an XSS vulnerability in EGroupware: the file phpgwapi/js/jscalendar/test.php exposes the lang parameter, enabling remote attackers to inject arbitrary web script or HTML. Affected products are EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Editio...

CVE-2011-4949

The CVE-2011-4949 entry concerns an SQL injection in EGroupware’s web UI: phpgwapi/js/dhtmlxtree/samples/with_db/loaddetails.php. Affected are EGroupware Enterprise Line (EPL) prior to 11.1.20110804-1 and EGroupware Community Edition prior to 1.8.001.20110805. The vulnerability allows remote atta...

CVE-2011-4948

CVE-2011-4948 is a directory traversal vulnerability in EGroupware’s admin/remote.php. Affected products are EGroupware Enterprise Line (EPL) prior to 11.1.20110804-1 and EGroupware Community Edition prior to 1.8.001.20110805. The issue allows remote attackers to read arbitrary files by supplying...

CVE-2011-4950

Cross-site scripting XSS vulnerability in phpgwapi/js/jscalendar/test.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

Egroupware 1.8.002 Cross Site Scripting

Egroupware v1.8.002 processexec.php Reflected Cross-Site Scripting XSS Google Dork: inurl:etemplate/processexec.php Title: Egroupware v1.8.002 processexec.php Remote XSS Vulnerability Type: Remote Author: Marcos Garcia Severity: Medium – CVSS: 5 AV:N/AC:L/Au:N/C:N/I:P/A:N Impact: Direct execution...

eGroupware Premium Line v9.1 - SQL Injection Vulnerability

Document Title: =============== eGroupware Premium Line v9.1 - SQL Injection Vulnerability Release Date: ============= 2011-07-17 Vulnerability Laboratory ID VL-ID: ==================================== 81 Product & Service Introduction: =============================== EPL is the professional choi...

eGroupWare CMS v1.6.x - Multiple Web Vulnerabilities

Document Title: =============== eGroupWare CMS v1.6.x - Multiple Web Vulnerabilities Release Date: ============= 2011-07-09 Vulnerability Laboratory ID VL-ID: ==================================== 137 Product & Service Introduction: =============================== eGroupWare is many things. It is ...

eGroupWare CMS v1.6.x - Multiple Web Vulnerabilities

Document Title: =============== eGroupWare CMS v1.6.x - Multiple Web Vulnerabilities Release Date: ============= 2011-07-09 Vulnerability Laboratory ID VL-ID: ==================================== 137 Product & Service Introduction: =============================== eGroupWare is many things. It is ...

EGroupware Multiple Vulnerabilities (May 2011) - Active Check

EGroupware is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:egroupware:egroupware";...

eGroupware 1.8.001.20110421 Local File Inclusion

------------------------------------------------------------------------ Software................eGroupware 1.8.001.20110421 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.egroupware.org/ Discovery Date..........5/19/2011 Teste...