CVE-2011-4949

概要

参考情報

• comments.gmane.org/gmane.comp.web.egroupware.german/33144
• packetstormsecurity.org/files/100179/eGroupware-1.8.001-SQL-Injection.html · Exploit
• autosectools.com/Advisory/eGroupware-1.8.001-SQL-Injection-179
• egroupware.org/changelog
• egroupware.org/epl-changelog
• openwall.com/lists/oss-security/2012/03/29/1
• openwall.com/lists/oss-security/2012/03/30/3
• securityfocus.com/bid/52770

egroupware のその他の脆弱性

• CVE-2026-22243高 8.8EGroupware is a Web based groupware server written in PHP. A SQL Injection vulnerability exists in the core components of EGroupware prior t…
• CVE-2023-38329中 6.1An issue was discovered in eGroupWare 17.1.20190111. A cross-site scripting Reflected (XSS) vulnerability exists in calendar/freebusy.php, w…
• CVE-2023-38327中 5.3An issue was discovered in eGroupWare 17.1.20190111. A User Enumeration vulnerability exists under calendar/freebusy.php, which allows unaut…
• CVE-2024-40614緊急 9.8EGroupware before 23.1.20240624 mishandles an ORDER BY clause. This leads to json.php?menuaction=EGroupware\Api\Etemplate\Widget\Nextmatch::…
• CVE-2023-38328中 4.9An issue was discovered in eGroupWare 17.1.20190111. An Improper Password Storage vulnerability affects the setup panel of under setup/manag…