CVE-2014-2027
HighSummary
eGroupware before 1.8.006.20140217 is vulnerable to PHP object injection attacks, allowing remote attackers to delete arbitrary files and possibly execute arbitrary code.
Risk Assessment
Attackers can exploit this vulnerability to gain control over the system, potentially leading to serious security implications for the organization.
Recommendation
It is recommended to update eGroupware to the latest version to mitigate this vulnerability and conduct a security audit of the system.
Other vulnerabilities in eGroupware
See all- CVE-2026-40187High
In egroupware version 26.0 and earlier, an authenticated administrator can achieve OS-level Remote Code Execution (RCE) by uploading a malicious eTemplate XML file (.xet) to the VFS /etemplates mount. The Widget::expand_name() method passes template widget attribute values directly into a PHP eval() call with only double-quote escaping applied - backtick characters are not escaped. In PHP, backticks inside a double-quoted eval() string execute shell commands, allowing an admin-level user to escalate from web application access to arbitrary OS command execution on the server.
- CVE-2026-27823High
A vulnerability in EGroupware allows an authenticated attacker to achieve Remote Code Execution (RCE) on the server. If self-registration is enabled, it may be exploitable without authentication. The issue stems from improper authorization checks combined with file write and arbitrary file read primitives.
Original NVD description (English source)
eGroupware before 1.8.006.20140217 allows remote attackers to conduct PHP object injection attacks, delete arbitrary files, and possibly execute arbitrary code via the (1) addr_fields or (2) trans parameter to addressbook/csv_import.php, (3) cal_fields or (4) trans parameter to calendar/csv_import.php, (5) info_fields or (6) trans parameter to csv_import.php in (a) projectmanager/ or (b) infolog/, or (7) processed parameter to preferences/inc/class.uiaclprefs.inc.php.