CVE-2009-4416

The CVE-2009-4416 issue affects phpgroupware, specifically the login.php module, where an input validation flaw allows cross-site scripting via arbitrary parameters starting with phpgw_. This is documented in Debian DSA-1978-1 and related OpenVAS entries, which describe multiple remote vulnerabil...

CVE-2009-4416

Cross-site scripting XSS vulnerability in login.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter whose name begins with the "phpgw" sequence...

CVE-2009-4415

CVE-2009-4415 is a directory traversal vulnerability in phpgroupware that allows remote attackers to read arbitrary files via the addressbook/csv_import.php csvfile parameter or to include local files via addressbook/inc/class.uiXport.inc.php conv_type parameter. The issue affects PHPGroupWare 0....

phpGroupWare Multiple Input Validation Vulnerabilities

phpGroupWare is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to disclose sensitive information, steal cookie-based authentication credentials, compromise the application, access or...

phpGroupWare Multiple Input Validation Vulnerabilities

phpGroupWare is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

phpGroupWare Detection

This host is running phpGroupWare, a web based messaging, collaboration and enterprise management platform. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

phpGroupWare远程执行命令漏洞

由于它不正确的调用了include函数，可能允许包含远程的恶意文件，并导致 在受影响主机上执行任意命令。（以web server运行权限，通常是'nobody'） 由于phpGroupWare的库包含文件放在浏览器可访问的目录下，因此攻击者可以 直接调用这些包含文件，由于其中的一个包含文件phpgw.inc.php是用include 函数时是通过变量完成的，用户可以通过Web接口定义这个变量的内容，导致 远程主机上的文件可以被包含进来。如果攻击者设置一个有效的php文件，就 可能在受攻击的主机上执行任意命令。 有问题的代码部分，如下： include$phpgwinfo server...

Gentoo Security Advisory GLSA 200409-22 (phpGroupWare)

The remote host is missing updates announced in advisory GLSA 200409-22. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200507-08 (phpgroupware egroupware)

The remote host is missing updates announced in advisory GLSA 200507-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200501-08 (phpgroupware)

The remote host is missing updates announced in advisory GLSA 200501-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200501-08 (phpgroupware)

The remote host is missing updates announced in advisory GLSA 200501-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200507-08 (phpgroupware egroupware)

The remote host is missing updates announced in advisory GLSA 200507-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200409-22 (phpGroupWare)

The remote host is missing updates announced in advisory GLSA 200409-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200508-20 (phpgroupware)

The remote host is missing updates announced in advisory GLSA 200508-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200508-20 (phpgroupware)

The remote host is missing updates announced in advisory GLSA 200508-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 365-1 (phpgroupware)

The remote host is missing an update to phpgroupware announced via advisory DSA 365-1. OpenVAS Vulnerability Test $Id: deb3651.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 365-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 746-1 (phpgroupware)

The remote host is missing an update to phpgroupware announced via advisory DSA 746-1. OpenVAS Vulnerability Test $Id: deb7461.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 746-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1063-1 (phpgroupware)

The remote host is missing an update to phpgroupware announced via advisory DSA 1063-1. It was discovered that the Avatar upload feature of FUD Forum, a component of the web based groupware system phpgroupware, does not sufficiently validate uploaded files, which might lead to the execution of...

Debian: Security Advisory (DSA-746-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-419)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...