CVE:CVE-2004-2573
CNNVD:CNNVD-200412-162
phpGroupWare 0.9.14.005及其早期版本的tables_update.inc.php存在PHP远程文件包含漏洞。远程攻击者可以借助appdir参数的外部URL执行任意PHP代码。
solution:Upgrade phpgroupware phpgroupware to a higher version than 0.9.14.005,0.9.14.003,and avoid the version (,0.9.14.005],0.9.14.003