Secure testing team - Jun 2010 - Bug#584517: CVE-2010-0404: Multiple SQL injection vulnerabilities

Package: phpgroupware
Severity: grave
Tags: security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,
the following CVE (Common Vulnerabilities & Exposures) id was
published for phpgroupware.

CVE-2010-0404[0]:
| Multiple SQL injection vulnerabilities in phpGroupWare (phpgw) before
| 0.9.16.016 allow remote attackers to execute arbitrary SQL commands
| via unspecified parameters to (1) class.sessions_db.inc.php, (2)
| class.translation_sql.inc.php, or (3) class.auth_sql.inc.php in
| phpgwapi/inc/.

If you fix the vulnerability please also make sure to include the
CVE id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0404
    http://security-tracker.debian.org/tracker/CVE-2010-0404


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkwIvrgACgkQNxpp46476aq41wCfQ0VPTXt9wJea3uxc8AyFqinN
iJEAn23Iev9NwpsKs0mobx63GDSVoOKs
=T2FI
-----END PGP SIGNATURE-----