SecuritySpace - CVE-2013-6241

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2013-6241

Description: The Birthday widget in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4.x before 7.4.0-rev14, in certain user-id sharing scenarios, does not properly construct a SQL statement for next-year birthdays, which allows remote authenticated users to obtain sensitive birthday, displayname, firstname, and surname information via a birthdays action to api/contacts, aka bug 29315.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-6241
Bugtraq: 20131106 Open-Xchange Security Advisory 2013-11-06 (Google Search)
http://archives.neohapsis.com/archives/bugtraq/2013-11/0025.html

CVE ID:	CVE-2013-6241
Description:	The Birthday widget in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4.x before 7.4.0-rev14, in certain user-id sharing scenarios, does not properly construct a SQL statement for next-year birthdays, which allows remote authenticated users to obtain sensitive birthday, displayname, firstname, and surname information via a birthdays action to api/contacts, aka bug 29315.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6241 Bugtraq: 20131106 Open-Xchange Security Advisory 2013-11-06 (Google Search) http://archives.neohapsis.com/archives/bugtraq/2013-11/0025.html