Test ID:	1.3.6.1.4.1.25623.1.0.100640
Category:	Web application abuses
Title:	phpGroupWare Multiple Vulnerabilities
Summary:	phpGroupWare is prone to multiple SQL-injection vulnerabilities and; to a Local File Include Vulnerability because it fails to sufficiently; sanitize user-supplied data before using it.
Description:	Summary: phpGroupWare is prone to multiple SQL-injection vulnerabilities and to a Local File Include Vulnerability because it fails to sufficiently sanitize user-supplied data before using it. Vulnerability Impact: Exploiting these issues could allow an attacker to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database or to view files and execute local scripts in the context of the webserver process. Affected Software/OS: Versions of phpGroupWare prior to 0.9.16.016 are vulnerable. Solution: The vendor has released phpGroupWare 0.9.16.016 to address this issue. Please see the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0403 BugTraq ID: 40167 http://www.securityfocus.com/bid/40167 Bugtraq: 20100514 phpGroupWare SQL Injections and Local File Inclusion Vulnerabilities (CVE-2010-0403 and CVE-2010-0404) (Google Search) http://www.securityfocus.com/archive/1/511299/100/0/threaded Debian Security Information: DSA-2046 (Google Search) http://www.debian.org/security/2010/dsa-2046 http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.html http://secunia.com/advisories/39665 http://secunia.com/advisories/39731 http://www.vupen.com/english/advisories/2010/1145 http://www.vupen.com/english/advisories/2010/1146 XForce ISS Database: phpgroupware-about-file-include(58657) https://exchange.xforce.ibmcloud.com/vulnerabilities/58657 Common Vulnerability Exposure (CVE) ID: CVE-2010-0404
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.