Group-Office Command Injection and SQL Injection Vulnerabilities

Bugtraq ID:	48941
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 29 2011 12:00AM
Updated:	Jul 29 2011 12:00AM
Credit:	Reported by the vendor.
Vulnerable:	Intermesh Group-Office 3.7.23
Not Vulnerable:	Intermesh Group-Office 3.7.25

Group-Office Command Injection and SQL Injection Vulnerabilities

Group-Office is prone to an SQL-injection vulnerability and command injection vulnerability because the application fails to properly sanitize user-supplied input.

Exploiting these issues could allow an attacker to execute arbitrary code, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Very few details are available. We will update this BID as more information emerges.

TCExam 11.2.009, 11.2.010 and 11.2.011 are vulnerable; other versions may also be affected.

Group-Office Command Injection and SQL Injection Vulnerabilities

An attacker can exploit the SQL-injection issue through a browser. Attackers can exploit the command injection issue with readily available tools.

Group-Office Command Injection and SQL Injection Vulnerabilities

References:

• Group-Office Homepage (Intermesh)
  
• Version 3.7.26 of GroupOffice (Geeknet)