CVE-2001-0043 phpGroupWare before 0.9.7 allows remote attackers to execute arbitrary PHP commands by specifying a malicious include file in the phpgw_info parameter of the phpgw.inc.php program.
HighCVSS 10.0
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
phpGroupWare before 0.9.7 allows remote attackers to execute arbitrary PHP commands by specifying a malicious include file in the phpgw_info parameter of the phpgw.inc.php program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpgroupware | = 0.9.6 | No fix listed |
References
- 20001206 (SRADV00006) Remote command execution vulnerabilities in phpGroupWare exploit mailing-list patch vendor-advisory
- sourceforge.net patch
- 1682 vdb-entry
- 2069 patch vdb-entry vendor-advisory
- phpgroupware-include-files(5650) vdb-entry