CVE

Id
9812  
CVE No.
CVE-2004-1384  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) kp3, (2) type, (3) msg, (4) forum_id, (5) pos, (6) cats_app, (7) cat_id, (8) msgball[msgnum], (9) fldball[acctnum] parameters to index.php or (10) ticket_id to viewticket_details.php.  
Phase
Assigned (20050128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
66893 9812 CVE-2004-1384 BUGTRAQ:20041215 Multiple phpGroupWare Vulnerabilities [ phpGroupWare 0.9.16.003 && Earlier ]  View
66894 9812 CVE-2004-1384 URL:http://marc.info/?l=bugtraq&m=110312656029072&w=2  View
66895 9812 CVE-2004-1384 MISC:http://www.gulftech.org/?node=research&article_id=00054-12142004  View
66896 9812 CVE-2004-1384 GENTOO:GLSA-200501-08  View
66897 9812 CVE-2004-1384 URL:http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml  View
66898 9812 CVE-2004-1384 BID:11952  View
66899 9812 CVE-2004-1384 URL:http://www.securityfocus.com/bid/11952  View
66900 9812 CVE-2004-1384 XF:phpgroupware-index-preferences-xss(18496)  View

Related JVN