CVE-2004-0016
The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for...
The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files.
Exploit likelihood
What each source reports
NVD Score used
The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files.
- Record
CVE-2004-0016- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files.
- Record
CVE-2004-0016- Updated
- 2026-11-02
EUVDEUVD-2004-0016 No score
The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files.
- Record
EUVD-2004-0016- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fwqj-284x-gfhj No score
The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for...
The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files.
- Record
GHSA-fwqj-284x-gfhj- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpgroupwareDebian:3.0 From an advisory covering 2 CVEs |
before 0.9.14-0.RC3.2.woody3 | 0.9.14-0.RC3.2.woody3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0016 is a high vulnerability (CVSS 7.5) in Phpgroupware, published January 9, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.59%, the 75th percentile. No source names a fixed version.