CVE:CVE-2004-2575
CNNVD:CNNVD-200412-1088
phpGroupWare 0.9.14.005及其更早版本存在漏洞。远程攻击者可以借助一个对（1）hook_admin.inc.php，（2）hook_home.inc.php，（3）class.holidaycalc.inc.php，和（4）setup.inc.php.sample的直接请求获取敏感信息，该漏洞可能在出错信息中泄露路径。
solution:Upgrade phpgroupware phpgroupware to a higher version than 0.9.16.000,0.9.16.002,0.9.16.003,0.9.16.005,and avoid the version 0.9.16.000,0.9.16.002,0.9.16.003,0.9.16.005