Vulnerability in Phpgroupware

CVE-2004-2574

Cross-site scripting (XSS) vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to inject arbitrary web script or HTML via the date parameter in a calendar.uicalendar.planner menuaction.

EPSS: 0.036 (88.2th percentile) — read the EPSS interpretation.

Affected products

Phpgroupware — versions 0.9.16.000, 0.9.16.002, 0.9.16.003
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM, Exploit)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_OSVDB, Exploit, vdb-entry)