https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T14:25:43.322054+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-261849 EUVD-2026-261849 2026-10-07T14:25:43.371193+00:00 EUVD-2026-261849 https://cve.radiocsirt.org/vuln/fkie_cve-2024-40614 fkie_cve-2024-40614 2026-10-07T14:25:43.371259+00:00

EGroupware before 23.1.20240624 mishandles an ORDER BY clause. This leads to json.php?menuaction=EGroupware\Api\Etemplate\Widget\Nextmatch::ajax_get_rows sort.id SQL injection by authenticated users for Address Book or InfoLog sorting.

 https://cve.radiocsirt.org/vuln/ghsa-phg7-8mm9-gj88 GHSA-phg7-8mm9-gj88 — EGroupware mishandles an ORDER BY clause 2026-10-07T14:25:43.371296+00:00

Affected: Packagist: egroupware/egroupware

EGroupware before 23.1.20240624 mishandles an ORDER BY clause. This leads to json.php menuaction=EGroupware\Api\Etemplate\Widget\Nextmatch::ajax_get_rows sort.id SQL injection by authenticated users for Address Book or InfoLog sorting.