Unscored DSA-1978-1 3 CVEs

phpgroupware - several vulnerabilities

Published Jan 26, 2010 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 5.0	phpgroupware	1:0.9.16.012+dfsg-8+lenny1

Vulnerabilities 3

Unscored —

CVE-2009-4414

SQL injection vulnerability in phpgwapi /inc/class.auth_sql.inc.php in phpGroupWare 0.9.16.12, and possibly other versi…

Dec 24, 2009
Unscored —

CVE-2009-4415

Multiple directory traversal vulnerabilities in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, …

Dec 24, 2009
Unscored —

CVE-2009-4416

Cross-site scripting (XSS) vulnerability in login.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9…

Dec 24, 2009