ID de Prueba:	1.3.6.1.4.1.25623.1.0.100640
Categoría:	Web application abuses
Título:	phpGroupWare Multiple Vulnerabilities
Resumen:	phpGroupWare is prone to multiple SQL-injection vulnerabilities and; to a Local File Include Vulnerability because it fails to sufficiently; sanitize user-supplied data before using it.
Descripción:	Summary: phpGroupWare is prone to multiple SQL-injection vulnerabilities and to a Local File Include Vulnerability because it fails to sufficiently sanitize user-supplied data before using it. Vulnerability Impact: Exploiting these issues could allow an attacker to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database or to view files and execute local scripts in the context of the webserver process. Affected Software/OS: Versions of phpGroupWare prior to 0.9.16.016 are vulnerable. Solution: The vendor has released phpGroupWare 0.9.16.016 to address this issue. Please see the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0403 BugTraq ID: 40167 http://www.securityfocus.com/bid/40167 Bugtraq: 20100514 phpGroupWare SQL Injections and Local File Inclusion Vulnerabilities (CVE-2010-0403 and CVE-2010-0404) (Google Search) http://www.securityfocus.com/archive/1/511299/100/0/threaded Debian Security Information: DSA-2046 (Google Search) http://www.debian.org/security/2010/dsa-2046 http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.html http://secunia.com/advisories/39665 http://secunia.com/advisories/39731 http://www.vupen.com/english/advisories/2010/1145 http://www.vupen.com/english/advisories/2010/1146 XForce ISS Database: phpgroupware-about-file-include(58657) https://exchange.xforce.ibmcloud.com/vulnerabilities/58657 Common Vulnerability Exposure (CVE) ID: CVE-2010-0404
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.