What’s Vulnerable › Vulnerabilities

CVE-2004-2573

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2004-12-31 · updated 2026-06-16

Description

PHP remote file inclusion vulnerability in tables_update.inc.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to execute arbitrary PHP code via an external URL in the appdir parameter.

Affected products

• Phpgroupware: through 0.9.14.005; 0.9.14.003

References

• http://www.osvdb.org/7599
• http://www.securityfocus.com/bid/12074
• https://savannah.gnu.org/bugs/?func=detailitem&item_id=7478
• http://www.osvdb.org/7599
• http://www.securityfocus.com/bid/12074
• https://savannah.gnu.org/bugs/?func=detailitem&item_id=7478

Get alerted when CVE-2004-2573 or the next vulnerability affects your stack