phpgroupware phpgroupware 0.9.14.007 vulnerabilities and exploits

(subscribe to this query)

Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and previous versions allow remote malicious users to insert arbitrary HTML or web script, as demonstrated with a request to the wiki module.

Phpgroupware Phpgroupware 0.9.14.005 Phpgroupware Phpgroupware 0.9.14.006 Phpgroupware Phpgroupware 0.9.12 Phpgroupware Phpgroupware 0.9.13 Phpgroupware Phpgroupware 0.9.14.003 Phpgroupware Phpgroupware 0.9.14.007 Phpgroupware Phpgroupware 0.9.16.000 Phpgroupware Phpgroupware 0.9.16.002 Phpgroupware Phpgroupware 0.9.16 Rc1

Multiple cross-site scripting (XSS) vulnerabilities in phpGroupWare 0.9.16.003 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) kp3, (2) type, (3) msg, (4) forum_id, (5) pos, (6) cats_app, (7) cat_id, (8) msgball[msgnum], (9) f...

Phpgroupware Phpgroupware 0.9.14 Phpgroupware Phpgroupware 0.9.14.003 Phpgroupware Phpgroupware 0.9.16 Rc1 Phpgroupware Phpgroupware 0.9.14.007 Phpgroupware Phpgroupware 0.9.16.000 Phpgroupware Phpgroupware 0.9.12 Phpgroupware Phpgroupware 0.9.13 Phpgroupware Phpgroupware 0.9.16.002 Phpgroupware Phpgroupware 0.9.16.003 Phpgroupware Phpgroupware 0.9.14.005 Phpgroupware Phpgroupware 0.9.14.006

2 EDB exploits

phpGroupWare 0.9.16.003 and previous versions allows remote malicious users to gain sensitive information via (1) unexpected characters in the session ID such as shell metacharacters, (2) an invalid appname parameter to preferences.php or (3) an invalid menuaction parameter to in...

Phpgroupware Phpgroupware 0.9.16.000 Phpgroupware Phpgroupware 0.9.16.002 Phpgroupware Phpgroupware 0.9.14.003 Phpgroupware Phpgroupware 0.9.14.005 Phpgroupware Phpgroupware 0.9.14.006 Phpgroupware Phpgroupware 0.9.14.007 Phpgroupware Phpgroupware 0.9.12 Phpgroupware Phpgroupware 0.9.13 Phpgroupware Phpgroupware 0.9.14 Phpgroupware Phpgroupware 0.9.16.003 Phpgroupware Phpgroupware 0.9.16 Rc1

1 EDB exploit

Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and previous versions allow remote malicious users to execute arbitrary SQL statements via the (1) order, (2) project_id, (3) pro_main, or (4) hours_id parameters to index.php or (5) ticket_id to viewticket_details...

Phpgroupware Phpgroupware 0.9.14.007 Phpgroupware Phpgroupware 0.9.16.000 Phpgroupware Phpgroupware 0.9.14 Phpgroupware Phpgroupware 0.9.14.003 Phpgroupware Phpgroupware 0.9.16 Rc1 Phpgroupware Phpgroupware 0.9.14.005 Phpgroupware Phpgroupware 0.9.14.006 Phpgroupware Phpgroupware 0.9.12 Phpgroupware Phpgroupware 0.9.13 Phpgroupware Phpgroupware 0.9.16.002 Phpgroupware Phpgroupware 0.9.16.003

1 EDB exploit

Multiple SQL injection vulnerabilities in the (1) calendar and (2) infolog modules for phpgroupware 0.9.14 allow remote malicious users to perform unauthorized database operations.

Phpgroupware Phpgroupware 0.9.14

The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote malicious users to create and execute PHP files.

Phpgroupware Phpgroupware 0.9.14

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook