QwikSec

Security Database

CVE

CWE

Training

CVE-2004-1384

Published: Feb 6, 2005

Modified: Aug 8, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) kp3, (2) type, (3) msg, (4) forum_id, (5) pos, (6) cats_app, (7) cat_id, (8) msgball[msgnum], (9) fldball[acctnum] parameters to index.php or (10) ticket_id to viewticket_details.php.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

phpgroupware-index-preferences-xss(18496)

vdb-entry

x_refsource_XF

20041215 Multiple phpGroupWare Vulnerabilities [ phpGroupWare 0.9.16.003 && Earlier ]

mailing-list

x_refsource_BUGTRAQ

http://www.gulftech.org/?node=research&article_id=00054-12142004

x_refsource_MISC

vdb-entry

x_refsource_BID

vendor-advisory

x_refsource_GENTOO

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.