PT-2024-28943

Name of the Vulnerable Software and Affected Versions EGroupware versions prior to 23.1.20240624 Description The issue arises from the mishandling of an ORDER BY clause, leading to SQL injection by authenticated users when sorting Address Book or InfoLog. This specifically affects the...

PhpGroupWare multiple module SQL injection vulnerabilities

The remote host seems to be running PhpGroupWare, is a multi-user groupware suite written in PHP. It has been reported that this version may be prone to multiple SQL injection vulnerabilities in the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a...

Debian DSA-419-1 : phpgroupware - missing filename sanitising, SQL injection

The authors of phpgroupware, a web-based groupware system written in PHP, discovered several vulnerabilities. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2004-0016 In the 'calendar' module, 'save extension' was not enforced for holiday files. As a...

phpGroupWare Multiple Module SQL Injection

The remote host seems to be running PhpGroupWare, a multi-user groupware suite written in PHP. It has been reported that this version may be prone to multiple SQL injection vulnerabilities in the 'calendar' and 'infolog' modules. The problems exist due to insufficient sanitization of user-supplie...

CVE-2004-0017

PhpGroupWare (calendar and infolog modules, version 0.9.14 era) is affected by SQL injection vulnerabilities due to non-escaping of user-supplied data, enabling remote attackers to influence SQL query logic. Public sources (Debian DSA-419, OpenVAS entries, and NVD reference) confirm CAN-2004-0017...

DSA-419 phpgroupware - missing filename sanitising, SQL injection

Bulletin has no description...

CVE-2003-0657

Multiple SQL injection vulnerabilities in the infolog module for phpgroupware 0.9.14 and earlier could allow remote attackers to conduct unauthorized database actions...

CVE-2003-0657

CVE-2003-0657 covers multiple SQL injection vulnerabilities in the infolog module of phpgroupware