CVE-2018-25438

Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests to /compress.php with '../' sequences in the 'file'...

EUVD-2018-21962

Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests to /compress.php with '../' sequences in the 'file'...

VulnCheck KEV: CVE-2018-25438

Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests to /compress.php with '../' sequences in the 'file'...

EUVD-2010-3426

Malware in sbrugna...

Intermesh BV Group Office Cross-site Scripting Vulnerability

Intermesh BV Group Office is an enterprise CRM and groupware tool from Intermesh BV open source. A cross-site scripting vulnerability exists in Intermesh BV Group Office versions prior to 6.8.123 and prior to 25.0.27, which stems from insufficient input cleanup and could lead to a reflective...

CVE-2010-3428

SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a category action...

Intermesh BV Group Office CRM security vulnerability

Intermesh BV Group Office CRM is an application from Intermesh BV. Share projects, calendars, files and emails online with colleagues and clients. Easy to use and fully customizable. A security vulnerability exists in Intermesh BV Group Office CRM versions prior to 6.8.119 and 25.0.20, which stem...

Intermesh BV Group Office Cross-site Scripting Vulnerability

Intermesh BV Group Office is an enterprise CRM and groupware tool from Intermesh BV open source. A security vulnerability exists in Intermesh BV Group Office version 6.6.145. An attacker can exploit the vulnerability to elevate privileges and obtain sensitive information via the GOLANGUAGE cookie...

CVE-2010-3428

SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a category action...

Sql injection

SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a category action...

CVE-2010-3428

CVE-2010-3428 affects Intermesh Group-Office 3.5.9. The vulnerability is an SQL injection in the file modules/notes/json.php, exploitable via the category_id parameter in a category action. This allows remote attackers to manipulate the database (arbitrary SQL commands) without authentication, as...

CVE-2010-3428: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a category action...