CVE-2005-1203

Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute arbitrary SQL commands via the 1 filter or 2 catsapp parameter...

CVE-2005-1202

Multiple cross-site scripting XSS vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbitrary web script or HTML via the 1 abid, 2 page, 3 type, or 4 lang parameter to index.php or 5 categoryid parameter...

eGroupWare: XSS and SQL injection vulnerabilities

Background eGroupWare is a suite of web-based group applications including calendar, address book, messenger and email. Description Multiple SQL injection and cross-site scripting vulnerabilities have been found in several eGroupWare modules. Impact An attacker could possibly use the SQL injectio...

GLSA-200504-24 : eGroupWare: XSS and SQL injection vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200504-24 eGroupWare: XSS and SQL injection vulnerabilities Multiple SQL injection and cross-site scripting vulnerabilities have been found in several eGroupWare modules. Impact : An attacker could possibly use the SQL injection...

CVE-2005-1202

Multiple cross-site scripting XSS vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbitrary web script or HTML via the 1 abid, 2 page, 3 type, or 4 lang parameter to index.php or 5 categoryid parameter...

CVE-2005-1202

CVE-2005-1202 reports multiple XSS vulnerabilities in eGroupWare prior to version 1.0.0.007, exploitable via the following parameters to index.php: ab_id, page, type, lang, and category_id; and also via category_id. The CVE is corroborated across sources including NVD, Gentoo GLSA 200504-24, Free...

CVE-2005-1203

Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute arbitrary SQL commands via the 1 filter or 2 catsapp parameter...

CVE-2005-1203

Summary: CVE-2005-1203 affects eGroupWare. Multiple SQL injection vulnerabilities exist in index.php, exploitable via the (1) filter and (2) cats_app parameters, allowing remote attackers to execute arbitrary SQL commands. Affected versions are before 1.0.0.007. The vulnerability has a CVSSv2 bas...

Multiple eGroupware Vulnerabilities

GulfTech Security Research April 20th, 2005 Vendor : eGroupware URL : http://www.egroupware.org/ Version : Versions Prior To 1.0.0.007 Risk : Multiple Vulnerabilities Description: eGroupware is a very popular open source web based collaboration software that can be used within an intranet, or...

egroupware -- multiple cross-site scripting (XSS) and SQL injection vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbitrary web script or HTML via the 1 abid, 2 page, 3 type, or 4 lang parameter to index.php or 5 categoryid parameter. Multiple SQL injection vulnerabilities in index.php in...

eGroupWare 1.0 - ttsindex.php?filter SQL Injection

eGroupWare 1.0 - ttsindex.php?filter SQL Injection source: https://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate user-supplied input...

eGroupWare 1.0 - index.php?cats_app SQL Injection

eGroupWare 1.0 - index.php?catsapp SQL Injection source: https://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate user-supplied input. Thes...

eGroupWare 1.0 - index.php Multiple Cross-Site Scripting Vulnerabilities

eGroupWare 1.0 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate...

eGroupWare 1.0 - sitemgr-siteindex.php?category_id Cross-Site Scripting

eGroupWare 1.0 - sitemgr-siteindex.php?categoryid Cross-Site Scripting source: https://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate...

eGroupWare 1.0 - '/tts/index.php?filter' SQL Injection

source: https://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate user-supplied input. These issues result in cross-site scripting and SQL...

eGroupWare 1.0 - 'index.php?cats_app' SQL Injection

source: https://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate user-supplied input. These issues result in cross-site scripting and SQL...

eGroupWare 1.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate user-supplied input. These issues result in cross-site scripting and SQL...

eGroupWare 1.0 - '/sitemgr-site/index.php?category_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate user-supplied input. These issues result in cross-site scripting and SQL...

eGroupWare_infoleak.txt

MasterMind Security Group, Inc. Security Brief Date: April 7, 2005 Contact: Gerald Quakenbush Severity: Moderate to Serious Product: Confirmed in eGroupWare 1.001 and 1.006 Synopsis ======== The eGroupWare open-source software www.egroupware.org has a flaw that could expose confidential...

CVE-2005-1129

eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in the next e-mail, which may cause sensitive information to be sent to the wrong recipient...