EDB-11777

functional

eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities

view exploit source exploit_dbverifiedtype webappsauthor Nahuel Grisoliapublished 2010-03-16catalog exploit_db
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2010-3314USmedium4.3Exploit
Cross-site scripting (XSS) vulnerability in login.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 b…
CVE-2010-3313UShigh7.5Exploit
phpgwapi/js/fckeditor/editor/dialog/fck_spellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan