EUVD-2004-2567

Malware in sbrugna...

EUVD-2004-2568

Malware in sbrugna...

EUVD-2004-2569

Malware in sbrugna...

CVE-2004-2578

phpGroupWare before 0.9.16.002 transmits the 1 header admin and 2 setup passwords in plaintext via cookies, which allows remote attackers to sniff passwords...

phpGroupWare Admin/Setup Password Plaintext Cookie Storage

The version of PhpGroupWare installed on the remote host is reported to be affected by a plaintext cookie authentication credentials information disclosure vulnerability. If web administration of PhpGroupWare is not conducted over an encrypted link, an attacker with the ability to sniff network...

CVE-2004-0016

The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files...

[SECURITY] [DSA 419-1] New phpgroupware packages fix unintended PHP execution and SQL injection

-------------------------------------------------------------------------- Debian Security Advisory DSA 419-1 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 419-1] New phpgroupware packages fix unintended PHP execution and SQL injection

-------------------------------------------------------------------------- Debian Security Advisory DSA 419-1 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2003 http://www.debian.org/security/faq -...

[Full-Disclosure] [SECURITY] [DSA 419-1] New phpgroupware packages fix unintended PHP execution and SQL injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 419-1 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2003 http://www.debian.org/security/faq -...

phpGroupWare 0.9.13 - Debian Package Configuration

source: https://www.securityfocus.com/bid/4424/info PHPGroupWare is a freely available, open source groupware system written in PHP. It is distributed and maintained by the PHPGroupWare project. Debian packages of PHPGroupWare ship with an insecure default configuration. The PHP magicquotesgpc...

phpGroupWare 0.9.13 - Debian Package Configuration

phpGroupWare 0.9.13 - Debian Package Configuration source: https://www.securityfocus.com/bid/4424/info PHPGroupWare is a freely available, open source groupware system written in PHP. It is distributed and maintained by the PHPGroupWare project. Debian packages of PHPGroupWare ship with an insecu...