Gentoo: GLSA-200508-20 High: phpGroupWare Execution Risks

Gentoo Linux Security Advisory GLSA 200508-20 https://security.gentoo.org/ Severity: High Title: phpGroupWare: Multiple vulnerabilities Date: August 30, 2005 Bugs: #102379 ID: 200508-20

Synopsis ======= phpGroupWare is vulnerable to multiple issues ranging from information disclosure to a potential execution of arbitrary code.
Background ========= phpGroupWare is a multi-user groupware suite written in PHP.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-apps/phpgroupware < 0.9.16.008 >= 0.9.16.008
========== phpGroupWare improperly validates the "mid" parameter retrieved via a forum post. The current version of phpGroupWare also adds several safeguards to prevent...