EUVD-2004-2565

Malware in sbrugna...

EUVD-2012-2205

Malware in sbrugna...

CVE-2024-40614

EGroupware before 23.1.20240624 mishandles an ORDER BY clause. This leads to json.php?menuaction=EGroupware\Api\Etemplate\Widget\Nextmatch::ajaxgetrows sort.id SQL injection by authenticated users for Address Book or InfoLog sorting...

CVE-2012-2211: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in phpgwapi/inc/commonfunctionsinc.php in eGroupware before 1.8.004.20120405 allows remote attackers to inject arbitrary web script or HTML via the menuaction parameter to etemplate/processexec.php. NOTE: some of these details are obtained from third party...

PT-2012-3884

Name of the Vulnerable Software and Affected Versions eGroupware versions prior to 1.8.004.20120405 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the menuaction parameter to "etemplate/process exec.php". Recommendations For version...

CVE-2005-0887: Undefined Security Weakness

Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in 1 functions.inc.php or 2 main.php, which causes code to be injected into an eval statement...