341 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in eGroupWare 1.4.001 allow remote attackers to inject arbitrary web script or HTML via the catdatacolor parameter to 1 preferences/inc/class.uicategories.inc.php and 2 admin/inc/class.uicategories.inc.php...
CVE-2007-5091
Multiple cross-site scripting XSS vulnerabilities in eGroupWare 1.4.001 allow remote attackers to inject arbitrary web script or HTML via the catdatacolor parameter to 1 preferences/inc/class.uicategories.inc.php and 2 admin/inc/class.uicategories.inc.php...
CVE-2007-5091
CVE-2007-5091 concerns multiple cross-site scripting (XSS) vulnerabilities in the web application eGroupWare 1.4.001. The flaws allow remote attackers to inject arbitrary web script or HTML via the cat_data[color] parameter to two PHP components: preferences/inc/class.uicategories.inc.php and adm...
CVE-2007-3155
Unspecified vulnerability in eGroupWare before 1.2.107-2 has unknown impact and attack vectors related to ADOdb. NOTE: due to lack of details from the vendor, it is uncertain whether this issue is already covered by another CVE identifier...
CVE-2007-3154
Unspecified vulnerability in Walter Zorn wztooltip.js aka wztooltips before 4.01, as used by eGroupWare before 1.2.107-2 and other packages, has unknown impact and remote attack vectors...
CVE-2007-3155
Unspecified vulnerability in eGroupWare before 1.2.107-2 has unknown impact and attack vectors related to ADOdb. NOTE: due to lack of details from the vendor, it is uncertain whether this issue is already covered by another CVE identifier...
CVE-2007-3154
Unspecified vulnerability in Walter Zorn wztooltip.js aka wztooltips before 4.01, as used by eGroupWare before 1.2.107-2 and other packages, has unknown impact and remote attack vectors...
Sql injection
Unspecified vulnerability in eGroupWare before 1.2.107-2 has unknown impact and attack vectors related to ADOdb. NOTE: due to lack of details from the vendor, it is uncertain whether this issue is already covered by another CVE identifier...
CVE-2007-3154
Unspecified vulnerability in Walter Zorn wztooltip.js aka wztooltips before 4.01, as used by eGroupWare before 1.2.107-2 and other packages, has unknown impact and remote attack vectors...
CVE-2007-3155
CVE-2007-3155 affects eGroupWare before 1.2.107-2, with vulnerability tied to ADOdb. The description notes unknown impact and attack vectors; no concrete exploit details are provided in the connected documents. Vendor details are incomplete, and it’s unclear if this issue is covered by another CVE.
CVE-2007-3155
Unspecified vulnerability in eGroupWare before 1.2.107-2 has unknown impact and attack vectors related to ADOdb. NOTE: due to lack of details from the vendor, it is uncertain whether this issue is already covered by another CVE identifier...
CVE-2007-3154
Vulnerability CVE-2007-3154 affects Walter Zorn wz_tooltip.js (aka wz_tooltips) prior to 4.01, used by eGroupWare before 1.2.107-2. The connected records describe an unspecified vulnerability with unknown impact and remote attack vectors; no concrete root cause, affected versions, exploit details...
Debian DSA-899-1 : egroupware - programming errors
Several vulnerabilities have been discovered in egroupware, a web-based groupware suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-0870 Maksymilian Arciemowicz discovered several cross site scripting problems in phpsysinfo, which are also...
Ubuntu 4.10 / 5.04 : php4, php4-universe vulnerability (USN-147-1)
A remote code execution vulnerability has been discovered in the XMLRPC module of the PEAR PHP Extension and Application Repository extension of PHP. By sending specially crafted XMLRPC requests to an affected web server, a remote attacker could exploit this to execute arbitrary code with the web...
DEBIAN-CVE-2005-3348
HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter...
CVE-2005-3348
CVE-2005-3348 is a HTTP Response Splitting vulnerability in phpSysInfo (2.4 and earlier) used by phpGroupWare (0.9.16 and earlier) and eGroupWare (before 1.0.0.009). Exploitation via CRLF sequences in the charset parameter can cause web content spoofing and cache poisoning. OpenVAS entries (and D...
CVE-2005-3348
HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter...
[SECURITY] [DSA 899-1] New egroupware packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 899-1 [email protected] http://www.debian.org/security/ Martin Schulze November 17th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 899-1] New egroupware packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 899-1 [email protected] http://www.debian.org/security/ Martin Schulze November 17th, 2005 http://www.debian.org/security/faq -...