Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and previous versions allow remote malicious users to execute arbitrary SQL statements via the (1) order, (2) project_id, (3) pro_main, or (4) hours_id parameters to index.php or (5) ticket_id to viewticket_details.php.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
phpgroupware phpgroupware 0.9.14.007 |
||
phpgroupware phpgroupware 0.9.16.000 |
||
phpgroupware phpgroupware 0.9.14 |
||
phpgroupware phpgroupware 0.9.14.003 |
||
phpgroupware phpgroupware 0.9.16_rc1 |
||
phpgroupware phpgroupware 0.9.14.005 |
||
phpgroupware phpgroupware 0.9.14.006 |
||
phpgroupware phpgroupware 0.9.12 |
||
phpgroupware phpgroupware 0.9.13 |
||
phpgroupware phpgroupware 0.9.16.002 |
||
phpgroupware phpgroupware 0.9.16.003 |
Vulmon