Skip to content
OpenAdvisories
Unscored DSA-2013-1 2 CVEs

egroupware - several vulnerabilities

Published Mar 11, 2010 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 egroupware 1.4.004-2.dfsg-4.2

Vulnerabilities 2

  • High —
    CVE-2010-3313 Public exploit

    EGroupware Code Injection vulnerability

    phpgwapi/js/fckeditor/editor/dialog/fck_spellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 before 9.2.20100309; allows remote at…

    egroupware/egroupware Packagist
  • Unscored —
    CVE-2010-3314 Public exploit

    Cross-site scripting (XSS) vulnerability in login.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versi…