CVE:CVE-2001-0043
CNNVD:CNNVD-200102-094
phpGroupWare 0.9.7之前版本存在漏洞。远程攻击者通过说明phpgw.inc.php程序的phpgw_info参数的恶意包含文件执行任意PHP命令。
solution:Upgrade phpgroupware phpgroupware to a higher version than 0.9.6,and avoid the version 0.9.6