Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbitrary web script or HTML via the (1) ab_id, (2) page, (3) type, or (4) lang parameter to index.php or (5) category_id parameter.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-05-01 21:00
Updated : 2016-10-17 20:18
NVD link : CVE-2005-1202
Mitre link : CVE-2005-1202
JSON object : View
CWE
Products Affected
egroupware
- egroupware