GCVE - cpe:2.3:a:dan_cahill:nulllogic_groupware:1.2.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dan_cahill:nulllogic_groupware:1.2.7:*:*:*:*:*:*:*

part: a version: 1.2.7 update: *

Vendor	Dan Cahill (`de6608fb-ae37-56bf-bafc-3680087b6e53`)
Product	Nulllogic Groupware (`846d09b4-7b02-587e-86e4-7aa3492375e4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2356`	vulnerable	2026-06-08 04:51:28.008096	Details available Multiple stack-based buffer overflows in the pgsqlQuery function in NullLogic Groupware 1.2.7, when PostgreSQL is used, might allow remote attackers to execute arbitrary code via input to the (1) POP3, (2) SMTP, or (3) web component that triggers a long SQL query. Published: 2009-07-07T23:00:00.000Z Updated: 2024-08-07T05:44:56.042Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/1817 http://www.nth-dimension.org.uk/utils/get.php?downloadsid=55 http://www.securityfocus.com/archive/1/504737/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2355`	vulnerable	2026-06-08 04:51:28.007701	Details available The forum module in NullLogic Groupware 1.2.7 allows remote authenticated users to cause a denial of service (application crash) by specifying (1) an empty string or (2) a non-numeric string when selecting a forum, related to the fmessagelist function. Published: 2009-07-07T23:00:00.000Z Updated: 2024-08-07T05:44:55.935Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/1817 http://www.nth-dimension.org.uk/utils/get.php?downloadsid=55 http://www.securityfocus.com/archive/1/504737/100/0/threaded	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.