CVE-2004-2573: PHP remote file inclusion vulnerability in tables_update.inc.php in phpGroupWare 0.9.14.005 and earlier all...

Security readout for executives and security teams

This is a legacy phpGroupWare issue where a remote attacker may make the application load PHP code from an external URL. If an exposed vulnerable instance exists, compromise could reach application-level code execution. The sources do not provide CVSS, active exploitation, or detailed fix status. Exposure is limited to organizations still running phpGroupWare 0.9.14.005 or earlier, especially internet-facing deployments where tables_update.inc.php is reachable. Modern environments are likely unaffected unless they retain this legacy application. Treat as a high-priority legacy exposure check, not a broad emergency. The business risk is severe only if old phpGroupWare systems remain reachable, but those systems may be easy to overlook in long-lived environments. Mitigation focus: Inventory phpGroupWare deployments and confirm whether versions are 0.9.14.005 or earlier.; Remove or restrict public access to affected legacy instances while remediation is planned.; Check phpGroupWare or Savannah guidance for the appropriate upgrade or patch..

Prepared

Jun 29, 2026, 16:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.