Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phpgroupware phpgroupware 0.9.14.005 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2004-0875
Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and previous versions allow remote malicious users to insert arbitrary HTML or web script, as demonstrated with a request to the wiki module.
Phpgroupware Phpgroupware 0.9.14.005Phpgroupware Phpgroupware 0.9.14.006Phpgroupware Phpgroupware 0.9.12Phpgroupware Phpgroupware 0.9.13Phpgroupware Phpgroupware 0.9.14.003Phpgroupware Phpgroupware 0.9.14.007Phpgroupware Phpgroupware 0.9.16.000Phpgroupware Phpgroupware 0.9.16.002Phpgroupware Phpgroupware 0.9.16 Rc1
NA
CVE-2004-1383
Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and previous versions allow remote malicious users to execute arbitrary SQL statements via the (1) order, (2) project_id, (3) pro_main, or (4) hours_id parameters to index.php or (5) ticket_id to viewticket_details...
Phpgroupware Phpgroupware 0.9.14.007Phpgroupware Phpgroupware 0.9.16.000Phpgroupware Phpgroupware 0.9.14Phpgroupware Phpgroupware 0.9.14.003Phpgroupware Phpgroupware 0.9.16 Rc1Phpgroupware Phpgroupware 0.9.14.005Phpgroupware Phpgroupware 0.9.14.006Phpgroupware Phpgroupware 0.9.12Phpgroupware Phpgroupware 0.9.13Phpgroupware Phpgroupware 0.9.16.002Phpgroupware Phpgroupware 0.9.16.003
NA
CVE-2004-1384
Multiple cross-site scripting (XSS) vulnerabilities in phpGroupWare 0.9.16.003 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) kp3, (2) type, (3) msg, (4) forum_id, (5) pos, (6) cats_app, (7) cat_id, (8) msgball[msgnum], (9) f...
Phpgroupware Phpgroupware 0.9.14Phpgroupware Phpgroupware 0.9.14.003Phpgroupware Phpgroupware 0.9.16 Rc1Phpgroupware Phpgroupware 0.9.14.007Phpgroupware Phpgroupware 0.9.16.000Phpgroupware Phpgroupware 0.9.12Phpgroupware Phpgroupware 0.9.13Phpgroupware Phpgroupware 0.9.16.002Phpgroupware Phpgroupware 0.9.16.003Phpgroupware Phpgroupware 0.9.14.005Phpgroupware Phpgroupware 0.9.14.006
NA
CVE-2004-1385
phpGroupWare 0.9.16.003 and previous versions allows remote malicious users to gain sensitive information via (1) unexpected characters in the session ID such as shell metacharacters, (2) an invalid appname parameter to preferences.php or (3) an invalid menuaction parameter to in...
Phpgroupware Phpgroupware 0.9.16.000Phpgroupware Phpgroupware 0.9.16.002Phpgroupware Phpgroupware 0.9.14.003Phpgroupware Phpgroupware 0.9.14.005Phpgroupware Phpgroupware 0.9.14.006Phpgroupware Phpgroupware 0.9.14.007Phpgroupware Phpgroupware 0.9.12Phpgroupware Phpgroupware 0.9.13Phpgroupware Phpgroupware 0.9.14Phpgroupware Phpgroupware 0.9.16.003Phpgroupware Phpgroupware 0.9.16 Rc1
NA
CVE-2004-2578
phpGroupWare prior to 0.9.16.002 transmits the (1) header admin and (2) setup passwords in plaintext via cookies, which allows remote malicious users to sniff passwords.
Phpgroupware Phpgroupware 0.9.1Phpgroupware Phpgroupware 0.9.16.000Phpgroupware Phpgroupware 0.9.16.001Phpgroupware Phpgroupware 0.9.8Phpgroupware Phpgroupware 0.9.9Phpgroupware Phpgroupware 0.9.14.005Phpgroupware Phpgroupware 0.9.14.006Phpgroupware Phpgroupware 0.9.14.007Phpgroupware Phpgroupware 0.9.6Phpgroupware Phpgroupware 0.9.7Phpgroupware Phpgroupware 0.9.13Phpgroupware Phpgroupware 0.9.14.003Phpgroupware Phpgroupware 0.9.4Phpgroupware Phpgroupware 0.9.5Phpgroupware Phpgroupware 0.9.10Phpgroupware Phpgroupware 0.9.12Phpgroupware Phpgroupware 0.9.2Phpgroupware Phpgroupware 0.9.3Phpgroupware Phpgroupware 0.9.9 Pl1
NA
CVE-2004-2574
Cross-site scripting (XSS) vulnerability in index.php in phpGroupWare 0.9.14.005 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the date parameter in a calendar.uicalendar.planner menuaction.
Phpgroupware Phpgroupware 0.9.16.000Phpgroupware Phpgroupware 0.9.16.002Phpgroupware Phpgroupware 0.9.16.003Phpgroupware Phpgroupware
NA
CVE-2004-2575
phpGroupWare 0.9.14.005 and previous versions allow remote malicious users to obtain sensitive information via a direct request to (1) hook_admin.inc.php, (2) hook_home.inc.php, (3) class.holidaycalc.inc.php, and (4) setup.inc.php.sample, which reveals the path in an error messag...
Phpgroupware Phpgroupware 0.9.16.002Phpgroupware Phpgroupware 0.9.16.005Phpgroupware Phpgroupware 0.9.16.000Phpgroupware Phpgroupware 0.9.16.003
NA
CVE-2004-2573
PHP remote file inclusion vulnerability in tables_update.inc.php in phpGroupWare 0.9.14.005 and previous versions allows remote malicious users to execute arbitrary PHP code via an external URL in the appdir parameter.
Phpgroupware Phpgroupware 0.9.14.003Phpgroupware Phpgroupware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33228CVE-2024-20361log injectionbypassCVE-2024-4985CVE-2024-35223CVE-2024-29849CVE-2024-31893IMAP
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook