Debian: Security Advisory (DSA-842-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-5091

Multiple cross-site scripting XSS vulnerabilities in eGroupWare 1.4.001 allow remote attackers to inject arbitrary web script or HTML via the catdatacolor parameter to 1 preferences/inc/class.uicategories.inc.php and 2 admin/inc/class.uicategories.inc.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in eGroupWare 1.4.001 allow remote attackers to inject arbitrary web script or HTML via the catdatacolor parameter to 1 preferences/inc/class.uicategories.inc.php and 2 admin/inc/class.uicategories.inc.php...

CVE-2007-5091

Multiple cross-site scripting XSS vulnerabilities in eGroupWare 1.4.001 allow remote attackers to inject arbitrary web script or HTML via the catdatacolor parameter to 1 preferences/inc/class.uicategories.inc.php and 2 admin/inc/class.uicategories.inc.php...

CVE-2007-5091

Multiple cross-site scripting XSS vulnerabilities in eGroupWare 1.4.001 allow remote attackers to inject arbitrary web script or HTML via the catdatacolor parameter to 1 preferences/inc/class.uicategories.inc.php and 2 admin/inc/class.uicategories.inc.php...

CVE-2007-5091

CVE-2007-5091 concerns multiple cross-site scripting (XSS) vulnerabilities in the web application eGroupWare 1.4.001. The flaws allow remote attackers to inject arbitrary web script or HTML via the cat_data[color] parameter to two PHP components: preferences/inc/class.uicategories.inc.php and adm...

CVE-2007-5091: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in eGroupWare 1.4.001 allow remote attackers to inject arbitrary web script or HTML via the catdatacolor parameter to 1 preferences/inc/class.uicategories.inc.php and 2 admin/inc/class.uicategories.inc.php...

Sql injection

Unspecified vulnerability in eGroupWare before 1.2.107-2 has unknown impact and attack vectors related to ADOdb. NOTE: due to lack of details from the vendor, it is uncertain whether this issue is already covered by another CVE identifier...

CVE-2007-3154

Unspecified vulnerability in Walter Zorn wztooltip.js aka wztooltips before 4.01, as used by eGroupWare before 1.2.107-2 and other packages, has unknown impact and remote attack vectors...

CVE-2007-3155

Unspecified vulnerability in eGroupWare before 1.2.107-2 has unknown impact and attack vectors related to ADOdb. NOTE: due to lack of details from the vendor, it is uncertain whether this issue is already covered by another CVE identifier...

CVE-2007-3154

Unspecified vulnerability in Walter Zorn wztooltip.js aka wztooltips before 4.01, as used by eGroupWare before 1.2.107-2 and other packages, has unknown impact and remote attack vectors...

CVE-2007-3155

Unspecified vulnerability in eGroupWare before 1.2.107-2 has unknown impact and attack vectors related to ADOdb. NOTE: due to lack of details from the vendor, it is uncertain whether this issue is already covered by another CVE identifier...

CVE-2007-3154

Vulnerability CVE-2007-3154 affects Walter Zorn wz_tooltip.js (aka wz_tooltips) prior to 4.01, used by eGroupWare before 1.2.107-2. The connected records describe an unspecified vulnerability with unknown impact and remote attack vectors; no concrete root cause, affected versions, exploit details...

CVE-2007-3155

CVE-2007-3155 affects eGroupWare before 1.2.107-2, with vulnerability tied to ADOdb. The description notes unknown impact and attack vectors; no concrete exploit details are provided in the connected documents. Vendor details are incomplete, and it’s unclear if this issue is covered by another CVE.

CVE-2007-3154

Unspecified vulnerability in Walter Zorn wztooltip.js aka wztooltips before 4.01, as used by eGroupWare before 1.2.107-2 and other packages, has unknown impact and remote attack vectors...

CVE-2007-3155

Unspecified vulnerability in eGroupWare before 1.2.107-2 has unknown impact and attack vectors related to ADOdb. NOTE: due to lack of details from the vendor, it is uncertain whether this issue is already covered by another CVE identifier...

CVE-2007-3155: Undefined Security Weakness

Unspecified vulnerability in eGroupWare before 1.2.107-2 has unknown impact and attack vectors related to ADOdb. NOTE: due to lack of details from the vendor, it is uncertain whether this issue is already covered by another CVE identifier...

CVE-2007-3154: Undefined Security Weakness

Unspecified vulnerability in Walter Zorn wztooltip.js aka wztooltips before 4.01, as used by eGroupWare before 1.2.107-2 and other packages, has unknown impact and remote attack vectors...

Debian DSA-899-1 : egroupware - programming errors

Several vulnerabilities have been discovered in egroupware, a web-based groupware suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-0870 Maksymilian Arciemowicz discovered several cross site scripting problems in phpsysinfo, which are also...

Ubuntu 4.10 / 5.04 : php4, php4-universe vulnerability (USN-147-1)

A remote code execution vulnerability has been discovered in the XMLRPC module of the PEAR PHP Extension and Application Repository extension of PHP. By sending specially crafted XMLRPC requests to an affected web server, a remote attacker could exploit this to execute arbitrary code with the web...