PT-2005-2219 · Egroupware · Egroupware

James Bercegay · Publicado 2005-04-21 · Atualizado 2016-10-18 · CVE-2005-1203

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions eGroupware versions prior to 1.0.0.007

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the filter or cats app parameter in the "index.php" file.

Recommendations For versions prior to 1.0.0.007, update to version 1.0.0.007 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-1203

Produtos afetados

Egroupware

Referências · 11

• 🔥 https://exploit-db.com/exploits/25436 · Exploit
• 🔥 http://secunia.com/advisories/14982 · Exploit
• 🔥 http://securityfocus.com/bid/13212 · Exploit
• 🔥 https://exploit-db.com/exploits/25437 · Exploit
• http://sourceforge.net/project/shownotes.php?release_id=320768 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-1203 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1203 · Nota
• http://security.gentoo.org/glsa/glsa-200504-24.xml · Aviso do Fabricante
• http://gulftech.org/?node=research&article_id=00069-04202005 · Nota
• http://osvdb.org/15753 · Nota
• http://marc.info/?l=bugtraq&m=111401760125555&w=2 · Nota