Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
eGroupware before 1.8.006.20140217 allows remote attackers to conduct PHP object injection attacks, delete arbitrary files, and possibly execute arbitrary code via the (1) addr_fields or (2) trans parameter to addressbook/csv_import.php, (3) cal_fields or (4) trans parameter to calendar/csv_import.php, (5) info_fields or (6) trans parameter to csv_import.php in (a) projectmanager/ or (b) infolog/, or (7) processed parameter to preferences/inc/class.uiaclprefs.inc.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Stylite EGroupware 代码注入漏洞
Vulnerability Description
Stylite EGroupware是德国Stylite公司的一套基于PHP的团队协作软件。该软件包括电子邮件（IMAP/POP3）、通讯录、文档管理、书签等模块。 Stylite EGroupware 1.8.006.20140217之前版本中存在安全漏洞，该漏洞源于addressbook/csv_import.php脚本没有充分过滤‘addr_fields’和‘trans’参数；calendar/csv_import.php脚本没有充分过滤‘cal_fields’和‘trans’参数；projectm
CVSS Information
N/A
Vulnerability Type
N/A