CVE:CVE-2010-0404
CNNVD:CNNVD-201005-246
phpGroupWare是一个用PHP编写的多用户的网络组件，为开发其他程序提供了一个API。
phpGroupWare (phpgw)存在多个SQL注入漏洞，远程攻击者可通过(1)class.sessions_db.inc.php(2) class.translation_sql.inc.php或(3)phpgwapi/inc/中class.auth_sql.inc.php等未明参数执行任意SQL命令。
solution:Upgrade phpgroupware phpgroupware to a higher version than 0.9.16.015,0.9.16,0.9.16.000,0.9.16.001,0.9.16.002,0.9.16.003,0.9.16.005,0.9.16.010,0.9.16.011,0.9.16.012,0.9.16.014,and avoid the version (,0.9.16.015],0.9.16,0.9.16.000,0.9.16.001,0.9.16.002,0.9.16.003,0.9.16.005,0.9.16.010,0.9.16.011,0.9.16.012,0.9.16.014