CVE-2009-4416

概要

参考情報

• kambing.ui.ac.id/gentoo-portage/www-apps/phpgroupware/files/phpgroupware-SA35519.patch · Patch
• secunia.com/advisories/35519 · Vendor Advisory
• svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/login.php
• svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG
• svn.savannah.gnu.org/viewvc
• openwall.com/lists/oss-security/2009/12/20/1
• osvdb.org/56179
• securityfocus.com/bid/35761
• exchange.xforce.ibmcloud.com/vulnerabilities/51923

phpgroupware のその他の脆弱性

• CVE-2010-0404高 7.5Multiple SQL injection vulnerabilities in phpGroupWare (phpgw) before 0.9.16.016 allow remote attackers to execute arbitrary SQL commands vi…
• CVE-2010-0403中 6.8Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows remote attackers to include and execute arbi…
• CVE-2009-4415高 7.5Multiple directory traversal vulnerabilities in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, allow remote attacker…
• CVE-2009-4414中 6.8SQL injection vulnerability in phpgwapi /inc/class.auth_sql.inc.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014…
• CVE-2006-4458中 6.4Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allows remote attackers t…