← Back

Nulllogic Groupware

nulllogic_groupware

Vendor: Dan Cahill • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-2356
1Dan Cahill
1Nulllogic Groupware
Apr 23, 2026
Jul 7, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple stack-based buffer overflows in the pgsqlQuery function in NullLogic Groupware 1.2.7, when PostgreSQL is used, might allow remote attackers to execute arbitrary code via input to the (1) POP3, (2) SMTP, or (3) w...Show more
Multiple stack-based buffer overflows in the pgsqlQuery function in NullLogic Groupware 1.2.7, when PostgreSQL is used, might allow remote attackers to execute arbitrary code via input to the (1) POP3, (2) SMTP, or (3) web component that triggers a long SQL query.Show less
CVE-2009-2355
1Dan Cahill
1Nulllogic Groupware
Apr 23, 2026
Jul 7, 2009
N/A· v4
N/A· v3
4.0 MEDIUM· v2
The forum module in NullLogic Groupware 1.2.7 allows remote authenticated users to cause a denial of service (application crash) by specifying (1) an empty string or (2) a non-numeric string when selecting a forum, relat...Show more
The forum module in NullLogic Groupware 1.2.7 allows remote authenticated users to cause a denial of service (application crash) by specifying (1) an empty string or (2) a non-numeric string when selecting a forum, related to the fmessagelist function.Show less