GCVE - cpe:2.3:a:egroupware:egroupware:*:-:community:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:egroupware:egroupware:*:-:community:*:*:*:*:*

part: a version: * update: -

Vendor	Egroupware (`45ac88be-6c9b-5125-bc8c-15b434e3bff4`)
Product	Egroupware (`dcbf3681-ec32-5f8c-8665-3c65169da6b9`)
Edition	community
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-4951`	vulnerable	2026-06-08 04:59:34.012702	Details available Open redirect vulnerability in phpgwapi/ntlm/index.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter. Published: 2012-08-31T22:00:00.000Z Updated: 2024-09-16T18:19:43.891Z Open on db.gcve.eu Reference links http://www.egroupware.org/epl-changelog http://www.egroupware.org/changelog http://www.securityfocus.com/bid/52770 http://www.autosectools.com/Advisory/eGroupware-1.8.001-Reflected-Cross-site-Scripting-178 http://comments.gmane.org/gmane.comp.web.egroupware.german/33144	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4950`	vulnerable	2026-06-08 04:59:34.012285	Details available Cross-site scripting (XSS) vulnerability in phpgwapi/js/jscalendar/test.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to inject arbitrary web script or HTML via the lang parameter. Published: 2012-08-31T22:00:00.000Z Updated: 2024-09-16T17:47:58.267Z Open on db.gcve.eu Reference links http://www.egroupware.org/epl-changelog http://packetstormsecurity.org/files/100180/eGroupware-1.8.001-Cross-Site-Scripting.html http://www.egroupware.org/changelog http://www.securityfocus.com/bid/52770 http://www.autosectools.com/Advisory/eGroupware-1.8.001-Reflected-Cross-site-Scripting-178	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4949`	vulnerable	2026-06-08 04:59:34.011836	Details available SQL injection vulnerability in phpgwapi/js/dhtmlxtree/samples/with_db/loaddetails.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to execute arbitrary SQL commands via the id parameter. Published: 2012-08-31T22:00:00.000Z Updated: 2024-09-17T03:48:18.412Z Open on db.gcve.eu Reference links http://www.egroupware.org/epl-changelog http://www.autosectools.com/Advisory/eGroupware-1.8.001-SQL-Injection-179 http://www.egroupware.org/changelog http://www.securityfocus.com/bid/52770 http://comments.gmane.org/gmane.comp.web.egroupware.german/33144	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4948`	vulnerable	2026-06-08 04:59:34.010326	Details available Directory traversal vulnerability in admin/remote.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to read arbitrary files via a ..%2f (encoded dot dot slash) in the type parameter. Published: 2012-08-31T22:00:00.000Z Updated: 2024-09-16T20:21:15.832Z Open on db.gcve.eu Reference links http://www.egroupware.org/epl-changelog http://www.autosectools.com/Advisory/eGroupware-1.8.001.20110421-Local-File-Inclusion-224 http://packetstormsecurity.org/files/101676/eGroupware-1.8.001.20110421-Local-File-Inclusion.html http://www.egroupware.org/changelog http://www.securityfocus.com/bid/52770	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.