CVE-2004-0016
The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for...
CVE-2004-0016 is a high vulnerability (CVSS 7.5) in Phpgroupware, published January 9, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.59%, the 76th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 1.59%EPSS, 76th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpgroupwareDebian:3.0 From an advisory covering 2 CVEs | before 0.9.14-0.RC3.2.woody3 | 0.9.14-0.RC3.2.woody3 |
What each source reports
NVD Score used
The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files.
- Record
CVE-2004-0016- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files.
- Record
CVE-2004-0016- Updated
- 2026-11-02
EUVDEUVD-2004-0016No score
The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files.
- Record
EUVD-2004-0016- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fwqj-284x-gfhjNo score
The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for...
The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files.
- Record
GHSA-fwqj-284x-gfhj- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.