CVE-2010-0403

CVE-2010-0403 affects phpGroupWare (phpgw) up to version 0.9.16.015; a directory traversal flaw in about.php allows remote attackers to include arbitrary local files via the app parameter, enabling Local File Inclusion. Debian/OpenVAS references indicate additional SQL injection issues and confir...