📦 Egroupware

This vulnerability allows authenticated users to perform SQL injection attacks through the Address Book or InfoLog sorting functionality in EGroupware. Attackers can manipulate database queries to pot...

This CVE describes a user enumeration vulnerability in eGroupWare's calendar/freebusy.php endpoint. Unauthenticated remote attackers can determine valid usernames by analyzing server response differen...