Unrated severityNVD Advisory· Published May 19, 2010· Updated Jun 16, 2026
CVE-2010-0403
CVE-2010-0403
Description
Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the app parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12cpe:2.3:a:phpgroupware:phpgroupware:*:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:phpgroupware:phpgroupware:*:*:*:*:*:*:*:*range: <=0.9.16.015
- cpe:2.3:a:phpgroupware:phpgroupware:0.9.16:*:*:*:*:*:*:*
- cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.000:*:*:*:*:*:*:*
- cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.001:*:*:*:*:*:*:*
- cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.002:*:*:*:*:*:*:*
- cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.003:*:*:*:*:*:*:*
- cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.005:*:*:*:*:*:*:*
- cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.010:*:*:*:*:*:*:*
- cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.011:*:*:*:*:*:*:*
- cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.012:*:*:*:*:*:*:*
- cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.014:*:*:*:*:*:*:*
- (no CPE)range: <0.9.16.016
Patches
Vulnerability mechanics
References
11- download.phpgroupware.orgnvdPatchVendor Advisory
- forums.phpgroupware.org/index.phpnvdPatch
- www.vupen.com/english/advisories/2010/1145nvdPatchVendor Advisory
- secunia.com/advisories/39665nvdVendor Advisory
- secunia.com/advisories/39731nvdVendor Advisory
- www.vupen.com/english/advisories/2010/1146nvdVendor Advisory
- lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.htmlnvd
- www.debian.org/security/2010/dsa-2046nvd
- www.securityfocus.com/archive/1/511299/100/0/threadednvd
- www.securityfocus.com/bid/40167nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/58657nvd
News mentions
0No linked articles in our index yet.