392 matches found
CVE-2014-2987
Multiple cross-site request forgery CSRF vulnerabilities in EGroupware Enterprise Line EPL before 1.1.20140505, EGroupware Community Edition before 1.8.007.20140506, and EGroupware before 14.1 beta allow remote attackers to hijack the authentication of administrators for requests that 1 create an...
CVE-2014-2987: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in EGroupware Enterprise Line EPL before 1.1.20140505, EGroupware Community Edition before 1.8.007.20140506, and EGroupware before 14.1 beta allow remote attackers to hijack the authentication of administrators for requests that 1 create an...
PT-2014-5004
Name of the Vulnerable Software and Affected Versions EGroupware Enterprise Line EPL versions prior to 1.1.20140505 EGroupware Community Edition versions prior to 1.8.007.20140506 EGroupware versions prior to 14.1 beta Description The issue allows remote attackers to hijack the authentication of...
EGroupWare 1.0 Calendar Module date Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/11013/info It is reported that eGroupWare is susceptible to multiple cross-site scripting and HTML injection vulnerabilities. The cross-site scripting issues present themselves in the various parameters of the 'addressboo...
egroupware 1.8.001.20110421 - Multiple Vulnerabilities
No description provided by source. ------------------------------------------------------------------------ Software................eGroupware 1.8.001.20110421 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.egroupware.org/...
egroupware 1.6.002 and egroupware premium line 9.1 - Multiple Vulnerabilities
No description provided by source...
eGroupWare 1.0 index.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate user-supplied input. These issues result...
eGroupWare 1.0 tts/index.php filter Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate user-supplied input. These issues result...
eGroupWare 1.0 index.php cats_app Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate user-supplied input. These issues result...
eGroupWare 1.0 sitemgr-site/index.php category_id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate user-supplied input. These issues result...
EGroupware 1.8.006 - Multiple Vulnerabilities
No description provided by source. 1）简单的CSRF利用下面创建新的管理员登录“ImmuniWeb”和密码“ImmuniWeb”： 2）利用CSRF 写入php文件 1.php"...
CSRF and Remote Code Execution in EGroupware
Advisory ID: HTB23212 Product: EGroupware Vendor: http://www.egroupware.org/ Vulnerable Versions: 1.8.006 community edition and probably prior Tested Version: 1.8.006 community edition Advisory Publication: April 23, 2014 without technical details Vendor Notification: April 23, 2014 Vendor Patch:...
Mandriva Linux Security Advisory : egroupware (MDVSA-2014:104)
Updated egroupware packages fix security vulnerabilities : eGroupWare before 1.8.007 allows logged in users with administrative priviledges to remotely execute arbitrary commands on the server. It is also vulnerable to a cross site request forgery vulnerability that allows creating new...
MGASA-2014-0221 Updated egroupware packages fix a cross site request forgery
Updated egroupware packages fix security vulnerabilities: eGroupWare before 1.8.007 allows logged in users with administrative priviledges to remotely execute arbitrary commands on the server. It is also vulnerable to a cross site request forgery vulnerability that allows creating new...
Updated egroupware packages fix a cross site request forgery
Updated egroupware packages fix security vulnerabilities: eGroupWare before 1.8.007 allows logged in users with administrative priviledges to remotely execute arbitrary commands on the server. It is also vulnerable to a cross site request forgery vulnerability that allows creating new...
PT-2014-9129
Name of the Vulnerable Software and Affected Versions eGroupWare versions prior to 1.8.007 Description The issue allows logged-in users with administrative privileges to remotely execute arbitrary commands on the server. It is also vulnerable to a cross-site request forgery vulnerability that...
EGroupware 1.8.006 - Multiple Vulnerabilities
EGroupware version 1.8.006 suffers from code execution and cross site request forgery vulnerabilities. Product: EGroupware Vendor: http://www.egroupware.org/ Vulnerable Versions: 1.8.006 community edition and probably prior Tested Version: 1.8.006 community edition Advisory Publication: April 23,...
EGroupware 1.8.006 Cross Site Request Forgery / Code Injection
Advisory ID: HTB23212 Product: EGroupware Vendor: http://www.egroupware.org/ Vulnerable Versions: 1.8.006 community edition and probably prior Tested Version: 1.8.006 community edition Advisory Publication: April 23, 2014 without technical details Vendor Notification: April 23, 2014 Vendor Patch:...
eGroupWare 1.8.006 - Multiple Vulnerabilities
eGroupWare 1.8.006 - Multiple Vulnerabilities Advisory ID: HTB23212 Product: EGroupware Vendor: http://www.egroupware.org/ Vulnerable Versions: 1.8.006 community edition and probably prior Tested Version: 1.8.006 community edition Advisory Publication: April 23, 2014 without technical details...
eGroupWare 1.8.006 - Multiple Vulnerabilities
Advisory ID: HTB23212 Product: EGroupware Vendor: http://www.egroupware.org/ Vulnerable Versions: 1.8.006 community edition and probably prior Tested Version: 1.8.006 community edition Advisory Publication: April 23, 2014 without technical details Vendor Notification: April 23, 2014 Vendor Patch:...