Signature Detail

HTTP: eGroupware File Inclusion

This signature detects attempts to exploit a known local and remote file inclusion vulnerabilities in eGroupware. It is due to insufficient validation of user-supplied input. A remote attacker can exploit this by enticing a target to open a malicious URL link. A successful attack can result in arbitrary code execution and/or loss of sensitive information.

Extended Description

eGroupware is prone to a URI-redirection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to execute arbitrary local files within the context of the webserver process or redirect users to a potentially malicious site. This may aid in phishing attacks or allow the attacker to compromise the application; other attacks are also possible. eGroupware 1.8.001.20110421 is vulnerable; other versions may also be affected.

Affected Products

• eGroupWare 1.8.001.20110421

References

• BugTraq: 47968
• URL: http://www.egroupware.org/