Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

egroupware egroupware 1.4.001 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2010-3314
Cross-site scripting (XSS) vulnerability in login.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions prior to 1.6.003; and EPL 9.1 prior to 9.1.20100309 and 9.2 prior to 9.2.20100309; allows remote malicious users to inject arbitrary web script or HTML via t...
Egroupware Egroupware 1.4.001Egroupware Egroupware 1.6.001\\+.002Egroupware Egroupware 9.1Egroupware Egroupware 9.2Egroupware Egroupware 1.4.001\\+.002Egroupware Egroupware 1.6.002Egroupware Egroupware 1.4.002Egroupware Egroupware 1.6.001
7.5
CVSSv2
CVE-2010-3313
phpgwapi/js/fckeditor/editor/dialog/fck_spellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions prior to 1.6.003; and EPL 9.1 prior to 9.1.20100309 and 9.2 prior to 9.2.20100309; allows remote malicious users t...
Egroupware Egroupware 1.6.001\\+.002Egroupware Egroupware 1.6.001Egroupware Egroupware 9.1Egroupware Egroupware 1.6.002Egroupware Egroupware 1.4.001Egroupware Egroupware 1.4.002Egroupware Egroupware 9.2Egroupware Egroupware 1.4.001\\+.002
10
CVSSv2
CVE-2008-2041
Multiple unspecified vulnerabilities in eGroupWare prior to 1.4.004 have unspecified attack vectors and "grave" impact when the web server has write access to a directory under the web document root.
Egroupware Egroupware 1.4.001Egroupware Egroupware 1.4.002Egroupware Egroupware
4.3
CVSSv2
CVE-2007-5091
Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.4.001 allow remote malicious users to inject arbitrary web script or HTML via the cat_data[color] parameter to (1) preferences/inc/class.uicategories.inc.php and (2) admin/inc/class.uicategories.inc.php.
Egroupware Egroupware 1.4.001
4.3
CVSSv2
CVE-2008-1502
The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare prior to 1.4.003, Moodle prior to 1.8.5, and other products, allows remote malicious users to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string contai...
Moodle Moodle 1.8.1Moodle Moodle 1.6.7Moodle Moodle 1.5.0Moodle Moodle 1.5.3Moodle Moodle 1.4.2Moodle Moodle 1.4.1Moodle Moodle 1.2.0Moodle Moodle 1.1.1Moodle MoodleMoodle Moodle 1.7.4Moodle Moodle 1.7.3Moodle Moodle 1.6.4Moodle Moodle 1.6.3Moodle Moodle 1.6.2Moodle Moodle 1.5Moodle Moodle 1.4.5Moodle Moodle 1.3.2Moodle Moodle 1.3.1Egroupware Egroupware 1.0.3Egroupware Egroupware 1.0.1Moodle Moodle 1.7.6Moodle Moodle 1.7.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook