medium6.8
CVE-2010-0403
Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows remote attackers to include and execute arbitrary local files v…
Impact
Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the app parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpgroupware | Phpgroupware | through 0.9.16.015 Versions 0.9.16, 0.9.16.000, 0.9.16.001, 0.9.16.002, 0.9.16.003 |
Weakness classification
References
- NVD record
- CVE.org record
- http://download.phpgroupware.org/
- http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0
- http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.html
- http://secunia.com/advisories/39665
- http://secunia.com/advisories/39731
- http://www.debian.org/security/2010/dsa-2046
- http://www.securityfocus.com/archive/1/511299/100/0/threaded
- http://www.securityfocus.com/bid/40167
- http://www.vupen.com/english/advisories/2010/1145
- http://www.vupen.com/english/advisories/2010/1146
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58657
- http://download.phpgroupware.org/
- http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0
- http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.html
- http://secunia.com/advisories/39665
- http://secunia.com/advisories/39731
- http://www.debian.org/security/2010/dsa-2046
- http://www.securityfocus.com/archive/1/511299/100/0/threaded
- http://www.securityfocus.com/bid/40167
- http://www.vupen.com/english/advisories/2010/1145
- http://www.vupen.com/english/advisories/2010/1146
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58657