CVE-2026-40187

Summary (concrete details from sources): CVE-2026-40187 affects EGroupware 26.0 and earlier. An authenticated administrator can trigger OS-level RCE by uploading a malicious eTemplate XML file (.xet) to the VFS /etemplates mount. The vuln stems from Widget::expand_name() passing template widget a...

Eval Injection

Overview egroupware/egroupware is a library that extends a classic groupware with an integrated CRM-system, a secure file-server and Collabora Online Office. Affected versions of this package are vulnerable to Eval Injection via the expandname function. An attacker can execute arbitrary OS comman...

intertech-sql.txt

InterTech Co etemplate php Remote SQL Injection Vulnerability Author: GeNiUs IrAQI Home : www.iq-ty.com/vb email: gi737atyahoodotcom script : http://www.intertech.ps/ Dork: inurl:etemplate.php?id= Exploit:...