CVE-2011-4949

SQL injection vulnerability in phpgwapi/js/dhtmlxtree/samples/withdb/loaddetails.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-4951

Open redirect vulnerability in phpgwapi/ntlm/index.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter...

CVE-2011-4949

The CVE-2011-4949 entry concerns an SQL injection in EGroupware’s web UI: phpgwapi/js/dhtmlxtree/samples/with_db/loaddetails.php. Affected are EGroupware Enterprise Line (EPL) prior to 11.1.20110804-1 and EGroupware Community Edition prior to 1.8.001.20110805. The vulnerability allows remote atta...

CVE-2011-4950

CVE-2011-4950 is an XSS vulnerability in EGroupware: the file phpgwapi/js/jscalendar/test.php exposes the lang parameter, enabling remote attackers to inject arbitrary web script or HTML. Affected products are EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Editio...

CVE-2011-4948

CVE-2011-4948 is a directory traversal vulnerability in EGroupware’s admin/remote.php. Affected products are EGroupware Enterprise Line (EPL) prior to 11.1.20110804-1 and EGroupware Community Edition prior to 1.8.001.20110805. The issue allows remote attackers to read arbitrary files by supplying...

CVE-2011-4950

Cross-site scripting XSS vulnerability in phpgwapi/js/jscalendar/test.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

PT-2012-2017

Name of the Vulnerable Software and Affected Versions EGroupware Enterprise Line EPL versions prior to 11.1.20110804-1 EGroupware Community Edition versions prior to 1.8.001.20110805 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attack...

CVE-2011-4950: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in phpgwapi/js/jscalendar/test.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2011-4948: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/remote.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to read arbitrary files via a ..%2f encoded dot dot slash in the type parameter...

CVE-2011-4951: Undefined Security Weakness

Open redirect vulnerability in phpgwapi/ntlm/index.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter...

PT-2012-2014

Name of the Vulnerable Software and Affected Versions EGroupware Enterprise Line EPL versions prior to 11.1.20110804-1 EGroupware Community Edition versions prior to 1.8.001.20110805 Description The issue allows remote attackers to read arbitrary files via a ..%2f encoded dot dot slash in the typ...

CVE-2011-4949: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in phpgwapi/js/dhtmlxtree/samples/withdb/loaddetails.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-2015

Name of the Vulnerable Software and Affected Versions EGroupware Enterprise Line versions prior to 11.1.20110804-1 EGroupware Community Edition versions prior to 1.8.001.20110805 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter...

PT-2012-2016

Name of the Vulnerable Software and Affected Versions EGroupware Enterprise Line versions prior to 11.1.20110804-1 EGroupware Community Edition versions prior to 1.8.001.20110805 Description The issue allows remote attackers to inject arbitrary web script or HTML via the lang parameter in the...

Egroupware 1.8.002 Cross Site Scripting

Egroupware v1.8.002 processexec.php Reflected Cross-Site Scripting XSS Google Dork: inurl:etemplate/processexec.php Title: Egroupware v1.8.002 processexec.php Remote XSS Vulnerability Type: Remote Author: Marcos Garcia Severity: Medium – CVSS: 5 AV:N/AC:L/Au:N/C:N/I:P/A:N Impact: Direct execution...

eGroupware Premium Line v9.1 - SQL Injection Vulnerability

Document Title: =============== eGroupware Premium Line v9.1 - SQL Injection Vulnerability Release Date: ============= 2011-07-17 Vulnerability Laboratory ID VL-ID: ==================================== 81 Product & Service Introduction: =============================== EPL is the professional choi...

eGroupWare CMS v1.6.x - Multiple Web Vulnerabilities

Document Title: =============== eGroupWare CMS v1.6.x - Multiple Web Vulnerabilities Release Date: ============= 2011-07-09 Vulnerability Laboratory ID VL-ID: ==================================== 137 Product & Service Introduction: =============================== eGroupWare is many things. It is ...

eGroupWare CMS v1.6.x - Multiple Web Vulnerabilities

Document Title: =============== eGroupWare CMS v1.6.x - Multiple Web Vulnerabilities Release Date: ============= 2011-07-09 Vulnerability Laboratory ID VL-ID: ==================================== 137 Product & Service Introduction: =============================== eGroupWare is many things. It is ...

EGroupware Multiple Vulnerabilities (May 2011) - Active Check

EGroupware is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:egroupware:egroupware";...

eGroupware 1.8.001.20110421 Open Redirect

------------------------------------------------------------------------ Software................eGroupware 1.8.001.20110421 Vulnerability...........Open Redirect Threat Level............Low 1/5 Download................http://www.egroupware.org/ Discovery Date..........5/19/2011 Tested...