PT-2003-1676 · Phpgroupware · Phpgroupware

Publicado

2003-07-04

·

Atualizado

2016-10-18

·

CVE-2003-0504

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions: Phpgroupware version 0.9.14.003
Description: The issue allows remote attackers to insert arbitrary HTML or web script via a request to "index.php" in the "addressbook" module, potentially leading to cross-site scripting (XSS) attacks.
Recommendations: For Phpgroupware version 0.9.14.003, consider restricting access to the "addressbook" module until a fix is available, and avoid using the vulnerable module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2003-0504
DSA-365

Produtos afetados

Phpgroupware