Unscored DSA-419 2 CVEs

phpgroupware - missing filename sanitising, SQL injection

Published Jan 9, 2004 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.0	phpgroupware	0.9.14-0.RC3.2.woody3

Vulnerabilities 2

Unscored —

CVE-2004-0016

The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allo…

Sep 1, 2004
Unscored —

CVE-2004-0017

Multiple SQL injection vulnerabilities in the (1) calendar and (2) infolog modules for phpgroupware 0.9.14 allow remote…

Jan 14, 2004