CVE-2001-0043: Phpgroupware

High severity, CVSS 10.0. EPSS: 3.1% chance of exploitation in the next 30 days.

phpGroupWare before 0.9.7 allows remote attackers to execute arbitrary PHP commands by specifying a malicious include file in the phpgw_info parameter of the phpgw.inc.php program.

Affected products

• Phpgroupware Phpgroupware: version 0.9.6 only

Published 2001-02-16. Last modified 2026-06-16.