CVE-2010-0404

Publication date 19 May 2010

Last updated 24 July 2024

Ubuntu priority

Description

Multiple SQL injection vulnerabilities in phpGroupWare (phpgw) before 0.9.16.016 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) class.sessions_db.inc.php, (2) class.translation_sql.inc.php, or (3) class.auth_sql.inc.php in phpgwapi/inc/.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
phpgroupware	13.10 saucy	Not in release
	13.04 raring	Not in release
	12.10 quantal	Not in release
	12.04 LTS precise	Not in release
	11.10 oneiric	Not in release
	11.04 natty	Not in release
	10.10 maverick	Not in release
	10.04 LTS lucid	Ignored end of life
	9.10 karmic	Fixed 1:0.9.16.012+dfsg-8+lenny2build0.9.10.1
	9.04 jaunty	Fixed 1:0.9.16.012+dfsg-8+lenny2build0.9.04.1
	8.04 LTS hardy	Ignored end of life
	6.06 LTS dapper	Ignored end of life

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
phpgroupware	Vendor: http://www.debian.org/security/2010/dsa-2046

References

Other references

https://www.cve.org/CVERecord?id=CVE-2010-0404