NetSight
IP …
medium5.0Public exploit code

CVE-2004-1385

phpGroupWare 0.9.16.003 and earlier allows remote attackers to gain sensitive information via (1) unexpected characters in the session ID such as shell metacha…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

phpGroupWare 0.9.16.003 and earlier allows remote attackers to gain sensitive information via (1) unexpected characters in the session ID such as shell metacharacters, (2) an invalid appname parameter to preferences.php or (3) an invalid menuaction parameter to index.php, which reveals the web server path in an error message.

Affected products

VendorProductAffected versions
PhpgroupwarePhpgroupware
Versions 0.9.12, 0.9.13, 0.9.14, 0.9.14.003, 0.9.14.005, 0.9.14.006

References