CVE-2005-2164

SQL injection vulnerability in Covide Groupware-CRM allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...

CVE-2005-2164: Undefined Security Weakness

SQL injection vulnerability in Covide Groupware-CRM allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...

CVE-2004-1928

CVE-2004-1928 affects Tiki Wiki CMS Groupware (TikiWiki) up to version 1.8.1. The issue is in the image upload feature, where remote attackers can upload and potentially execute arbitrary files via the img/wiki_up URL. The vulnerability is remote, over the network, and contributes to partial conf...

CVE-2004-1923

Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to 1 bannerclick.php, 2 categorize.php, 3 tiki-adminincludedirectory.php, 4 tiki-directorysearch.php, which reveal the web server path in an error message...

CVE-2004-1924

Multiple cross-site scripting XSS vulnerabilities in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via via the 1 theme parameter to tiki-switchtheme.php, 2 find and priority parameters to messu-mailbox.php, 3 flag, priority, flagval,...

CVE-2004-1926

Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to inject arbitrary code via the 1 Theme, 2 Country, 3 Real Name, or 4 Displayed time zone fields in a User Profile, or the 5 Name, 6 Description, 7 URL, or 8 Country fields in a Directory/Add Site operation...

CVE-2004-1927

Directory traversal vulnerability in the map feature tiki-map.phtml in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. dot dot sequences in the mapfile parameter...

CVE-2004-1928

The image upload feature in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wikiup URL...

CVE-2004-1927: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the map feature tiki-map.phtml in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. dot dot sequences in the mapfile parameter...

CVE-2004-1924: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via via the 1 theme parameter to tiki-switchtheme.php, 2 find and priority parameters to messu-mailbox.php, 3 flag, priority, flagval,...

CVE-2004-1925: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sortmode parameter in 1 tiki-usermenu.php, 2 tiki-listfilegallery.php, 3 tiki-directoryranking.php, 4 tiki-browsecategories.php, 5 tiki-index.ph...

CVE-2004-1926: Improper Control of Generation of Code

Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to inject arbitrary code via the 1 Theme, 2 Country, 3 Real Name, or 4 Displayed time zone fields in a User Profile, or the 5 Name, 6 Description, 7 URL, or 8 Country fields in a Directory/Add Site operation...

CVE-2004-1928: Improper Input Validation

The image upload feature in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wikiup URL...

CVE-2004-1923: Exposure of Sensitive Information to an Unauthorized Actor

Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to 1 bannerclick.php, 2 categorize.php, 3 tiki-adminincludedirectory.php, 4 tiki-directorysearch.php, which reveal the web server path in an error message...

DSA-673-1 evolution - integer overflow

Bulletin has no description...

Novell Evolution groupware client integer overflow vulnerability

Buffer overflow in camel-lock-helper application...

CVE-2004-2576

class.vfsdav.inc.php in phpGroupWare 0.9.16.000 does not create .htaccess files to enable authorization checks for access to users' home-directory files, which allows remote attackers to obtain sensitive information from these files...

phpGroupWare Detection

The remote host is running PHPGroupWare, a groupware system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15982; scriptversion"1.19"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"phpGroupWare Detection"...

eGroupWare Detection

The remote host is running eGroupWare, a web-based groupware solution. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15720; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"eGroupWare Detection";...

CVE-2004-0754: Undefined Security Weakness

Integer overflow in Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the size variable in Groupware server messages...