| Package | Affected versions | Patched versions |
|---|---|---|
| phpgroupware | = 0.9.14 |
The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free