Phpgroupware vulnerabilities

Products

• Phpgroupware 27

Newest

• phpgroupware Multiple SQL injection vulnerabilities in phpGroupWare (phpgw) before 0.9.16.016 allow remote... CVE-2010-0404 7.5 HighMay 13, 2010
• phpgroupware Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows... CVE-2010-0403 6.8 MediumMay 13, 2010
• phpgroupware Cross-site scripting (XSS) vulnerability in login.php in phpGroupWare 0.9.16.12, and possibly... CVE-2009-4416 4.3 MediumDecember 24, 2009
• phpgroupware Multiple directory traversal vulnerabilities in phpGroupWare 0.9.16.12, and possibly other... CVE-2009-4415 7.5 HighDecember 24, 2009
• phpgroupware SQL injection vulnerability in phpgwapi /inc/class.auth_sql.inc.php in phpGroupWare 0.9.16.12,... CVE-2009-4414 6.8 MediumDecember 24, 2009
• phpgroupware Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9... CVE-2006-4458 Public exploit 6.4 MediumAugust 31, 2006
• phpgroupware Multiple directory traversal vulnerabilities in index.php in phpSysInfo 2.4 and earlier, as used... CVE-2005-3347 Fix available 6.8 MediumNovember 15, 2005
• phpgroupware Cross-site scripting (XSS) vulnerability in phpGroupWare 0.9.16.000 allows administrators to... CVE-2005-2761 4.3 MediumAugust 31, 2005
• phpgroupware phpGroupWare before 0.9.16.002 transmits the (1) header admin and (2) setup passwords in... CVE-2004-2578 5.0 MediumDecember 31, 2004
• phpgroupware The acl_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not... CVE-2004-2577 5.0 MediumDecember 31, 2004
• phpgroupware class.vfs_dav.inc.php in phpGroupWare 0.9.16.000 does not create .htaccess files to enable... CVE-2004-2576 5.0 MediumDecember 31, 2004
• phpgroupware phpGroupWare 0.9.14.005 and earlier allow remote attackers to obtain sensitive information via a... CVE-2004-2575 5.0 MediumDecember 31, 2004
• phpgroupware Cross-site scripting (XSS) vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier... CVE-2004-2574 Public exploit 4.3 MediumDecember 31, 2004
• phpgroupware PHP remote file inclusion vulnerability in tables_update.inc.php in phpGroupWare 0.9.14.005 and... CVE-2004-2573 Public exploit 7.5 HighDecember 31, 2004
• phpgroupware Unknown vulnerability in phpGroupWare before 0.9.14.002 has unknown attack vectors and impact,... CVE-2004-2407 10.0 HighDecember 31, 2004
• phpgroupware Unknown "overflow" in the phpgw_config table for phpGroupWare before 0.9.14.002 has unknown... CVE-2004-2406 10.0 HighDecember 31, 2004
• phpgroupware phpGroupWare 0.9.16.003 and earlier allows remote attackers to gain sensitive information via (1)... CVE-2004-1385 Public exploit 5.0 MediumDecember 31, 2004
• phpgroupware Multiple cross-site scripting (XSS) vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow... CVE-2004-1384 Public exploit 4.3 MediumDecember 31, 2004
• phpgroupware Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote... CVE-2004-1383 Public exploit 7.5 HighDecember 31, 2004
• phpgroupware Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002... CVE-2004-0875 6.8 MediumSeptember 24, 2004
• phpgroupware Multiple SQL injection vulnerabilities in the (1) calendar and (2) infolog modules for... CVE-2004-0017 7.5 HighJanuary 9, 2004
• phpgroupware The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for... CVE-2004-0016 7.5 HighJanuary 9, 2004
• phpgroupware Multiple SQL injection vulnerabilities in the infolog module for phpgroupware 0.9.14 and earlier... CVE-2003-0657 7.5 HighAugust 5, 2003
• phpgroupware Unknown vulnerability in the Virtual File System (VFS) capability for phpGroupWare 0.9.16preRC... CVE-2003-0599 10.0 HighJuly 25, 2003
• phpgroupware Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware 0.9.14.003 (aka webdistro)... CVE-2003-0504 4.3 MediumJuly 4, 2003
• phpgroupware PHPGroupware 0.9.12 and earlier, when running with the magic_quotes_gpc feature disabled, allows... CVE-2002-0536 Public exploit 7.5 HighJuly 3, 2002
• phpgroupware phpGroupWare before 0.9.7 allows remote attackers to execute arbitrary PHP commands by specifying... CVE-2001-0043 10.0 HighFebruary 16, 2001