CVE:CVE-2004-0017
CNNVD:CNNVD-200402-009
PHPGroupware是一款免费开放源代码的群件系统，由PHPGroupware项目组开发维护并通过PHP语言实现。
PHPGroupWare包含的'calendar'和'infolog'模块存在SQL注入漏洞，远程攻击者可以利用这个漏洞获得敏感信息或进行数据库修改。
问题是'calendar'和'infolog'模块对外部输入缺少充分过滤，提交恶意SQL命令作为URI参数，可更改原有的数据库逻辑，获得敏感信息或进行数据库修改。
solution:Upgrade phpgroupware phpgroupware to a higher version than 0.9.14,and avoid the version 0.9.14
solution:Upgrade openpkg openpkg to a higher version than 2.1,2.2,current,and avoid the version 2.1,2.2,current; Upgrade squid squid to a higher version than 2.0_patch2,2.1_patch2,2.3_.stable4,2.3_.stable5,2.4,2.4_.stable2,2.4_.stable6,2.4_.stable7,2.5_.stable1,2.5_.stable3,2.5_.stable4,2.5_.stable5,2.5_.stable6,3.0_pre1,3.0_pre2,3.0_pre3,and avoid the version 2.0_patch2,2.1_patch2,2.3_.stable4,2.3_.stable5,2.4,2.4_.stable2,2.4_.stable6,2.4_.stable7,2.5_.stable1,2.5_.stable3,2.5_.stable4,2.5_.stable5,2.5_.stable6,3.0_pre1,3.0_pre2,3.0_pre3; Upgrade gentoo linux to a higher version than *; Upgrade redhat fedora_core to a higher version than core_2.0,and avoid the version core_2.0; Upgrade trustix secure_linux to a higher version than 1.5,2.0,2.1,and avoid the version 1.5,2.0,2.1; Upgrade ubuntu ubuntu_linux to a higher version than 4.1,and avoid the version 4.1