CVE-2010-0404

Опубликовано: 19 мая 2010

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in phpGroupWare (phpgw) before 0.9.16.016 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) class.sessions_db.inc.php, (2) class.translation_sql.inc.php, or (3) class.auth_sql.inc.php in phpgwapi/inc/.

Ссылки

http://download.phpgroupware.org/
Patch
Vendor Advisory
http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0
Patch
http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.html
Patch
http://secunia.com/advisories/39665
Vendor Advisory
http://secunia.com/advisories/39731
Vendor Advisory
http://www.debian.org/security/2010/dsa-2046
http://www.securityfocus.com/archive/1/511299/100/0/threaded
http://www.vupen.com/english/advisories/2010/1145
Vendor Advisory
http://www.vupen.com/english/advisories/2010/1146
Vendor Advisory
http://download.phpgroupware.org/
Patch
Vendor Advisory
http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0
Patch
http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.html
Patch
http://secunia.com/advisories/39665
Vendor Advisory
http://secunia.com/advisories/39731
Vendor Advisory
http://www.debian.org/security/2010/dsa-2046
http://www.securityfocus.com/archive/1/511299/100/0/threaded
http://www.vupen.com/english/advisories/2010/1145
Vendor Advisory
http://www.vupen.com/english/advisories/2010/1146
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phpgroupware:phpgroupware:*:*:*:*:*:*:*:*

Версия до 0.9.16.015 (включая)

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.000:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.001:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.002:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.003:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.005:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.010:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.011:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.012:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.014:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.00926

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

CVE-2010-0404

ubuntu

больше 15 лет назад

CVE-2010-0404

debian

больше 15 лет назад

Multiple SQL injection vulnerabilities in phpGroupWare (phpgw) before ...

GHSA-2jh9-p5pg-q6f4

github

больше 3 лет назад

EPSS

Процентиль: 75%

0.00926

Низкий

7.5 High

CVSS2

Дефекты

CWE-89