Groupoffice
1 CVEs
product
Monthly
SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
PHP
SQLi
Microsoft
Groupoffice
NVD
Exploit-DB
CVSS 2.0
6.5
EPSS
2.5%
EPSS 2%
CVSS 6.5
MEDIUM
POC
This Month
SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
PHP
SQLi
Microsoft
+1
NVD
Exploit-DB