high7.5
CVE-2009-4415
Multiple directory traversal vulnerabilities in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, allow remote attackers to (1) read arbit…
Impact
Multiple directory traversal vulnerabilities in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, allow remote attackers to (1) read arbitrary files via the csvfile parameter to addressbook/csv_import.php, or (2) include and execute arbitrary local files via the conv_type parameter in addressbook/inc/class.uiXport.inc.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpgroupware | Phpgroupware | Version 0.9.16.12 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/35519
- http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/csv_import.php?r1=15464&r2=19117&pathrev=19117&sortby=date&root=phpgroupware
- http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/inc/class.uiXport.inc.php?r1=14819&r2=19117&pathrev=19117&sortby=date&root=phpgroupware
- http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG?r1=17045&r2=19117&pathrev=19117&sortby=date&root=phpgroupware
- http://svn.savannah.gnu.org/viewvc?view=rev&root=phpgroupware&sortby=date&revision=19117
- http://www.openwall.com/lists/oss-security/2009/12/20/1
- http://www.osvdb.org/56177
- http://www.osvdb.org/56180
- http://www.securityfocus.com/bid/35761
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51921
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51924
- http://secunia.com/advisories/35519
- http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/csv_import.php?r1=15464&r2=19117&pathrev=19117&sortby=date&root=phpgroupware
- http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/inc/class.uiXport.inc.php?r1=14819&r2=19117&pathrev=19117&sortby=date&root=phpgroupware
- http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG?r1=17045&r2=19117&pathrev=19117&sortby=date&root=phpgroupware
- http://svn.savannah.gnu.org/viewvc?view=rev&root=phpgroupware&sortby=date&revision=19117
- http://www.openwall.com/lists/oss-security/2009/12/20/1
- http://www.osvdb.org/56177
- http://www.osvdb.org/56180
- http://www.securityfocus.com/bid/35761
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51921
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51924