|
|
Group-Office Calender Module 'sort' Parameter SQL Injection Vulnerability
The Calender module for Group-Office is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Group-Office versions 4.0.71, 4.0.73 and 4.0.88 are vulnerable; other versions may also be affected. |
|
Privacy Statement |