PT-2005-3642 · Phpgroupware · Phpgroupware

Publicado 2005-08-31 · Atualizado 2008-09-05 · CVE-2005-2761

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions phpGroupWare version 0.9.16.000

Description The issue allows administrators to inject arbitrary web script or HTML by modifying the main screen message, which is a cross-site scripting (XSS) vulnerability.

Recommendations For phpGroupWare version 0.9.16.000, consider restricting access to modify the main screen message until a patch is available. As a temporary workaround, administrators should avoid modifying the main screen message to prevent potential exploitation.

Correção

Identificadores relacionados

CVE-2005-2761

DSA-798-1

Produtos afetados

Phpgroupware

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-2761 · Nota de Segurança
• http://savannah.gnu.org/bugs/?func=detailitem&item_id=13863 · Aviso do Fabricante
• http://securitytracker.com/id?1014832 · Nota
• http://debian.org/security/2005/dsa-798 · Aviso do Fabricante
• http://secunia.com/advisories/16558 · Aviso do Fabricante