The remote host is running eGroupWare, a web-based groupware solution. 

It is reported that versions 1.0.0.006 and older are prone to multiple SQL injection and cross-site scripting flaws.

Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbitrary web script or HTML via the (1) ab_id, (2) page, (3) type, or (4) lang parameter to index.php or (5) category_id parameter.

Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute arbitrary SQL commands via the (1) filter or (2) cats_app parameter.

The remote host is affected by the vulnerability described in GLSA-200504-24 (eGroupWare: XSS and SQL injection vulnerabilities)

    Multiple SQL injection and cross-site scripting vulnerabilities have     been found in several eGroupWare modules.
  Impact :

    An attacker could possibly use the SQL injection vulnerabilities to gain     information from the database. Furthermore the cross-site scripting     issues give an attacker the ability to inject and execute malicious     script code or to steal cookie based authentication credentials,     potentially compromising the victim's browser.
  Workaround :

    There is no known workaround at this time.

リモートホストは、WebベースのグループウェアソリューションであるeGroupWareを実行しています。 

バージョン1.0.0.006以前では、複数のSQLインジェクションとクロスサイトスクリプティングの欠陥が発生しやすいことが報告されています。

遠端主機正在執行 eGroupWare，這是一種 Web 型群組軟體解決方案。 

據報告， 1.0.0.006 版及更舊版本容易受到多個 SQL 注入和跨網站指令碼瑕疵影響。

远程主机正在运行 eGroupWare，这是一种基于 Web 的组件解决方案。 

据报告，1.0.0.006 及更早版本容易受到多个 SQL 注入和跨站脚本缺陷的影响。

The remote host is running eGroupWare, a web-based groupware solution. It is reported that versions prior 1.0.0.006 are prone to an unspecified vulnerability.

The remote host is running eGroupWare, a web-based groupware solution. It is reported that versions prior 1.0.0.007 are prone to an information disclosure vulnerability.  Specifically, if a user composes an email with an attachment and then cancels the email, the attachment will be attached and sent with the next outbound email.

ID	名稱	產品	系列	已發布	已更新	嚴重性
15719	EGroupWare Multiple Vulnerabilities (SQLi, ID)	Nessus	CGI abuses	2004/11/13	2022/6/1	high
19355	FreeBSD : egroupware -- multiple XSS (XSS) and SQL injection vulnerabilities (b4892b5b-fb1c-11d9-96ba-00909925db3e)	Nessus	FreeBSD Local Security Checks	2005/8/1	2021/1/6	high
18127	GLSA-200504-24 : eGroupWare: XSS and SQL injection vulnerabilities	Nessus	Gentoo Local Security Checks	2005/4/25	2021/1/6	high
15719	EGroupWareの複数の脆弱性（SQLi、ID）	Nessus	CGI abuses	2004/11/13	2022/6/1	high
15719	EGroupWare 多個弱點 (SQLi、ID)	Nessus	CGI abuses	2004/11/13	2022/6/1	high
15719	EGroupWare 多个漏洞（SQLi、ID）	Nessus	CGI abuses	2004/11/13	2022/6/1	high
2398	eGroupWare < 1.0.0.006 JiNN Application Unspecified Vulnerability	Nessus Network Monitor	CGI	2004/11/10	2019/3/6	medium
2819	EGroupWare < 1.0.0.007 Attachment Information Disclosure	Nessus Network Monitor	CGI	2005/4/13	2019/3/6	high

偵測

搜尋 Plugin

high

high

high

high

high

high

medium

high