|
|
Info |
Last Modified |
| 3 months ago |
|
|
|
|
|
Description |
phpGroupWare contains a flaw that may allow a remote attacker to execute arbitrary files. The issue is triggered due to the 'calendar' module which does not enforce the 'save extension' feature for holiday files. It is possible that the flaw may allow a remote attacker to execute arbitrary files resulting in a loss of integrity.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
OSVDB:
Web Related
|
|
Solution |
Upgrade to version 0.9.14.007 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
|
|
Products |
|
phpGroupWare
 |
0.9.14.006 |
|
|
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
