Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

phpgroupware: missing input sanitizing

Package(s):

phpgroupware

CVE #(s):

CVE-2005-2781

Created:

May 22, 2006

Updated:

May 24, 2006

Description:

It was discovered that the Avatar upload feature of FUD Forum, a component of the web based groupware system phpgroupware, does not sufficiently validate uploaded files, which might lead to the execution of injected web script code.

Alerts:

Debian

DSA-1063-1

2006-05-08

(Log in to post comments)