ID de Prueba:	1.3.6.1.4.1.25623.1.0.801944
Categoría:	Web application abuses
Título:	EGroupware Multiple Vulnerabilities (May 2011) - Active Check
Resumen:	EGroupware is prone to multiple vulnerabilities.
Descripción:	Summary: EGroupware is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - Input validation error in 'type' parameter to '/admin/remote.php?', which allows attackers to read arbitrary files via a ..%2f(dot dot) sequences. - Open redirect in '/phpgwapi/ntlm/index.php', when handling the URL. Vulnerability Impact: Successful exploitation could allow attackers to perform directory traversal attacks and read arbitrary files on the affected application or to redirect to an arbitrary URL. Affected Software/OS: EGroupware version 1.8.001.20110421 and probably prior. Solution: Update to version 1.8.001.20110805 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4951 BugTraq ID: 52770 http://www.securityfocus.com/bid/52770 http://packetstormsecurity.org/files/101675/eGroupware-1.8.001.20110421-Open-Redirect.html http://www.autosectools.com/Advisory/eGroupware-1.8.001-Reflected-Cross-site-Scripting-178 http://comments.gmane.org/gmane.comp.web.egroupware.german/33144 http://www.openwall.com/lists/oss-security/2012/03/29/1 http://www.openwall.com/lists/oss-security/2012/03/30/3 Common Vulnerability Exposure (CVE) ID: CVE-2011-4950 http://packetstormsecurity.org/files/100180/eGroupware-1.8.001-Cross-Site-Scripting.html Common Vulnerability Exposure (CVE) ID: CVE-2011-4949 http://packetstormsecurity.org/files/100179/eGroupware-1.8.001-SQL-Injection.html http://www.autosectools.com/Advisory/eGroupware-1.8.001-SQL-Injection-179 Common Vulnerability Exposure (CVE) ID: CVE-2011-4948 http://packetstormsecurity.org/files/101676/eGroupware-1.8.001.20110421-Local-File-Inclusion.html http://www.autosectools.com/Advisory/eGroupware-1.8.001.20110421-Local-File-Inclusion-224
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.