CVE-2004-2573 Information

Description

PHP remote file inclusion vulnerability in tables_update.inc.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to execute arbitrary PHP code via an external URL in the appdir parameter.

Reference

http://www.osvdb.org/7599 http://www.securityfocus.com/bid/12074 https://savannah.gnu.org/bugs/?func=detailitem&item_id=7478