CVE-2009-4415

概要

参考情報

• secunia.com/advisories/35519 · Vendor Advisory
• svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/csv_import.php
• svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/inc/class.uiXport.inc.php
• svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG
• svn.savannah.gnu.org/viewvc
• openwall.com/lists/oss-security/2009/12/20/1
• osvdb.org/56177
• osvdb.org/56180
• securityfocus.com/bid/35761
• exchange.xforce.ibmcloud.com/vulnerabilities/51921
• exchange.xforce.ibmcloud.com/vulnerabilities/51924

phpgroupware のその他の脆弱性

• CVE-2010-0404高 7.5Multiple SQL injection vulnerabilities in phpGroupWare (phpgw) before 0.9.16.016 allow remote attackers to execute arbitrary SQL commands vi…
• CVE-2010-0403中 6.8Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows remote attackers to include and execute arbi…
• CVE-2009-4416中 4.3Cross-site scripting (XSS) vulnerability in login.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, allows remot…
• CVE-2009-4414中 6.8SQL injection vulnerability in phpgwapi /inc/class.auth_sql.inc.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014…
• CVE-2006-4458中 6.4Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allows remote attackers t…