The remote host seems to be running PhpGroupWare, is a multi-user groupware suite written in PHP. It has been reported that this version may be prone to multiple SQL injection vulnerabilities in the 'calendar' and 'infolog' modules. The problems exist due to insufficient sanitization of user-supplied data. A remote attacker may exploit these issues to influence SQL query logic to disclose sensitive information that could be used to gain unauthorized access.

Update to version 0.9.14.007 or newer

• http://www.phpgroupware.org/

---

Updated on 2015-03-25