high7.5
CVE-2010-0404
Multiple SQL injection vulnerabilities in phpGroupWare (phpgw) before 0.9.16.016 allow remote attackers to execute arbitrary SQL commands via unspecified param…
Impact
Multiple SQL injection vulnerabilities in phpGroupWare (phpgw) before 0.9.16.016 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) class.sessions_db.inc.php, (2) class.translation_sql.inc.php, or (3) class.auth_sql.inc.php in phpgwapi/inc/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpgroupware | Phpgroupware | through 0.9.16.015 Versions 0.9.16, 0.9.16.000, 0.9.16.001, 0.9.16.002, 0.9.16.003 |
Weakness classification
References
- NVD record
- CVE.org record
- http://download.phpgroupware.org/
- http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0
- http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.html
- http://secunia.com/advisories/39665
- http://secunia.com/advisories/39731
- http://www.debian.org/security/2010/dsa-2046
- http://www.securityfocus.com/archive/1/511299/100/0/threaded
- http://www.vupen.com/english/advisories/2010/1145
- http://www.vupen.com/english/advisories/2010/1146
- http://download.phpgroupware.org/
- http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0
- http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.html
- http://secunia.com/advisories/39665
- http://secunia.com/advisories/39731
- http://www.debian.org/security/2010/dsa-2046
- http://www.securityfocus.com/archive/1/511299/100/0/threaded
- http://www.vupen.com/english/advisories/2010/1145
- http://www.vupen.com/english/advisories/2010/1146