Vulnerability in Phpgroupware

CVE-2005-2761

Cross-site scripting (XSS) vulnerability in phpGroupWare 0.9.16.000 allows administrators to inject arbitrary web script or HTML by modifying the main screen message.

EPSS: 0.010 (60.3th percentile) — read the EPSS interpretation.

Affected products

Phpgroupware — versions 0.9.16.000
N/a — versions n/a

References

security@debian.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
security@debian.org (vdb-entry, x_refsource_SECTRACK)
security@debian.org (vendor-advisory, x_refsource_DEBIAN)
security@debian.org (x_refsource_MISC, Vendor Advisory)