Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

egroupware: multiple vulnerabilities

Package(s):

egroupware

CVE #(s):

Created:

March 12, 2010

Updated:

March 17, 2010

Description:

From the Debian advisory:

Nahuel Grisolia discovered two vulnerabilities in Egroupware, a web-based groupware suite: Missing input sanitising in the spellchecker integration may lead to the execution of arbitrary commands and a cross-site scripting vulnerability was discovered in the login page.

Alerts:

Debian

DSA-2013-1

2010-03-11

(Log in to post comments)