338 matches found
CVE-2005-1129
The CVE-2005-1129 entry applies to eGroupWare 1.0.6 and earlier. If an e-mail is composed with an attachment but not sent, the system may send that attachment in the next e-mail, potentially exposing sensitive information to the wrong recipient. Affected component: the e-mail/attachment handling ...
eGroupWare Leaks Files
MasterMind Security Group, Inc. Security Brief Date: April 7, 2005 Contact: Gerald Quakenbush geraldq AT mastermindsecuritygroup.com Severity: Moderate to Serious Product: Confirmed in eGroupWare 1.001 and 1.006 Synopsis ======== The eGroupWare open-source software www.egroupware.org has a flaw...
EGroupWare < 1.0.0.007 Attachment Information Disclosure
Binary data 2819.prm...
CVE-2004-1467
Multiple cross-site scripting XSS vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 date or search text field in the calendar module, 2 Field parameter, Filter parameter, QField parameter, Start parameter or Search field in th...
CVE-2004-1467
CVE-2004-1467 affects eGroupWare up to 1.0.00.003 (and earlier). The issue is multiple XSS vulnerabilities in the calendar, address, message, and ticket modules (e.g., date/search fields, Field/Filter/QField/Start/Search in address, and Subject fields in message/ticket). Underlying impact is inje...
CVE-2004-1467
Multiple cross-site scripting XSS vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 date or search text field in the calendar module, 2 Field parameter, Filter parameter, QField parameter, Start parameter or Search field in th...
eGroupWare Detection
The remote host is running eGroupWare, a web-based groupware solution. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15720; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"eGroupWare Detection";...
EGroupWare Multiple Vulnerabilities (SQLi, ID)
The remote host is running eGroupWare, a web-based groupware solution. It is reported that versions 1.0.0.006 and older are prone to multiple SQL injection and cross-site scripting flaws. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...
[SA13110] eGroupWare Unspecified "JiNN" Vulnerability
---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...
eGroupWare < 1.0.0.006 JiNN Application Unspecified Vulnerability
Binary data 2398.prm...
egroupware -- arbitrary file download in JiNN
eGroupWare contains a bug in the JiNN component that allows a remote attacker to download arbitrary files...
GLSA-200409-06 : eGroupWare: Multiple XSS vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200409-06 eGroupWare: Multiple XSS vulnerabilities Joxean Koret recently discovered multiple cross site scripting vulnerabilities in various modules for the eGroupWare suite. This includes the calendar, address book, messenger and...
eGroupWare: Multiple XSS vulnerabilities
Background eGroupWare is a suite of web-based group applications including calendar, address book, messenger and email. Description Joxean Koret recently discovered multiple cross site scripting vulnerabilities in various modules for the eGroupWare suite. This includes the calendar, address book,...
Multiple Cross Site Scripting Vulnerabilities in eGroupWare
--------------------------------------------------------------------------- Multiple Cross Site Scripting Vulnerabilities in eGroupWare --------------------------------------------------------------------------- Author: Joxean Koret Date: 2004 Location: Basque Country...
eGroupWare 1.0 Calendar Module - date Cross-Site Scripting
eGroupWare 1.0 Calendar Module - date Cross-Site Scripting source: https://www.securityfocus.com/bid/11013/info It is reported that eGroupWare is susceptible to multiple cross-site scripting and HTML injection vulnerabilities. The cross-site scripting issues present themselves in the various...
eGroupWare <= 1.0.00.003 Multiple Module XSS
The remote version of eGroupware is vulnerable to a cross-site scripting attack. This could allow a remote attacker to steal the cookies of a legitimate user by tricking them into clicking a maliciously crafted URL. eGroupware reportedly has other cross-site scripting vulnerabilities, though Ness...
eGroupWare 1.0 Calendar Module - 'date' Cross-Site Scripting
source: https://www.securityfocus.com/bid/11013/info It is reported that eGroupWare is susceptible to multiple cross-site scripting and HTML injection vulnerabilities. The cross-site scripting issues present themselves in the various parameters of the 'addressbook' and 'calendar' modules. It is...
eGroupWare < 1.0.0.004 Multiple XSS
Binary data 2132.prm...