PT-2005-2219 · Egroupware · Egroupware

James Bercegay · Published 2005-04-21 · Updated 2016-10-18 · CVE-2005-1203

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions eGroupware versions prior to 1.0.0.007

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the filter or cats app parameter in the "index.php" file.

Recommendations For versions prior to 1.0.0.007, update to version 1.0.0.007 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2005-1203

Affected Products

Egroupware

References · 11

• 🔥 https://exploit-db.com/exploits/25436 · Exploit
• 🔥 http://secunia.com/advisories/14982 · Exploit
• 🔥 http://securityfocus.com/bid/13212 · Exploit
• 🔥 https://exploit-db.com/exploits/25437 · Exploit
• http://sourceforge.net/project/shownotes.php?release_id=320768 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1203 · Security Note
• http://security.gentoo.org/glsa/glsa-200504-24.xml · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1203 · Note
• http://gulftech.org/?node=research&article_id=00069-04202005 · Note
• http://osvdb.org/15753 · Note
• http://marc.info/?l=bugtraq&m=111401760125555&w=2 · Note