The remote host seems to be running PhpGroupWare, is a multi-user groupware suite written in PHP. This version is prone to a vulnerability that may permit remote attackers, without prior authentication, to include and execute malicious PHP scripts. Remote users may influence URI variables to include a malicious PHP script on a remote system, it is possible to cause arbitrary PHP code to be executed.

Update to version 0.9.14.006 or newer

• http://www.phpgroupware.org/

---

Updated on 2015-03-25