CVE-2007-2720

MEDIUM 4.3CVE-2007-2720 · Published 16/05/2007 · updated 16/06/2026

In short

CVE-2007-2720 is a MEDIUM (CVSS 4.3) vulnerability affecting group-office groupware (group-office).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
group-office groupware group-office	`= 2.16.12`	No fix yet

Description

Group-Office before 2.16-13 does not properly validate user IDs, which allows remote attackers to obtain sensitive information via certain requests for (1) message.php and (2) messages.php in modules/email/. NOTE: some of these details are obtained from third party information.

References

group-office.svn.sourceforge.net/viewvc/group-office
secunia.com/advisories/25369
sourceforge.net/project/shownotes.php · Patch
securityfocus.com/bid/23925
vupen.com/english/advisories/2007/1773

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free