phpgroupware phpgroupware 0.9.16.014 vulnerabilities and exploits

(subscribe to this query)

Directory traversal vulnerability in about.php in phpGroupWare (phpgw) prior to 0.9.16.016 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the app parameter.

Phpgroupware Phpgroupware 0.9.16.014 Phpgroupware Phpgroupware 0.9.16.012 Phpgroupware Phpgroupware 0.9.16.005 Phpgroupware Phpgroupware 0.9.16.003 Phpgroupware Phpgroupware 0.9.16.011 Phpgroupware Phpgroupware 0.9.16.010 Phpgroupware Phpgroupware Phpgroupware Phpgroupware 0.9.16.002 Phpgroupware Phpgroupware 0.9.16.001 Phpgroupware Phpgroupware 0.9.16.000 Phpgroupware Phpgroupware 0.9.16

Multiple SQL injection vulnerabilities in phpGroupWare (phpgw) prior to 0.9.16.016 allow remote malicious users to execute arbitrary SQL commands via unspecified parameters to (1) class.sessions_db.inc.php, (2) class.translation_sql.inc.php, or (3) class.auth_sql.inc.php in phpgw...

Phpgroupware Phpgroupware 0.9.16.014 Phpgroupware Phpgroupware 0.9.16.012 Phpgroupware Phpgroupware 0.9.16.011 Phpgroupware Phpgroupware 0.9.16 Phpgroupware Phpgroupware Phpgroupware Phpgroupware 0.9.16.001 Phpgroupware Phpgroupware 0.9.16.000 Phpgroupware Phpgroupware 0.9.16.010 Phpgroupware Phpgroupware 0.9.16.005 Phpgroupware Phpgroupware 0.9.16.003 Phpgroupware Phpgroupware 0.9.16.002

SQL injection vulnerability in phpgwapi /inc/class.auth_sql.inc.php in phpGroupWare 0.9.16.12, and possibly other versions prior to 0.9.16.014, when magic_quotes_gpc is disabled, allows remote malicious users to execute arbitrary SQL commands via the passwd parameter to login.php...

Phpgroupware Phpgroupware 0.9.16.012

Cross-site scripting (XSS) vulnerability in login.php in phpGroupWare 0.9.16.12, and possibly other versions prior to 0.9.16.014, allows remote malicious users to inject arbitrary web script or HTML via an arbitrary parameter whose name begins with the "phpgw_" sequence...

Phpgroupware Phpgroupware 0.9.16.12

Multiple directory traversal vulnerabilities in phpGroupWare 0.9.16.12, and possibly other versions prior to 0.9.16.014, allow remote malicious users to (1) read arbitrary files via the csvfile parameter to addressbook/csv_import.php, or (2) include and execute arbitrary local fi...

Phpgroupware Phpgroupware 0.9.16.12

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook