Test ID:	1.3.6.1.4.1.25623.1.0.14292
Category:	Web application abuses
Title:	PhpGroupWare Multiple HTML Injection Vulnerabilities
Summary:	PhpGroupWare is prone to multiple HTML injection vulnerabilities.
Description:	Summary: PhpGroupWare is prone to multiple HTML injection vulnerabilities. Vulnerability Insight: The issues present themselves due to a lack of sufficient input validation performed on form fields used by PHPGroupWare modules. Vulnerability Impact: A malicious attacker may inject arbitrary HTML and script code using these form fields that may be incorporated into dynamically generated web content. Solution: Update to version 0.9.14.005 or newer. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0504 Bugtraq: 20030702 [KSA-003] Cross Site Scripting Vulnerability in Phpgroupware (Google Search) http://marc.info/?l=bugtraq&m=105718361607981&w=2 Conectiva Linux advisory: CLA-2003:697 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000697 Debian Security Information: DSA-365 (Google Search) http://www.debian.org/security/2003/dsa-365 http://www.mandriva.com/security/advisories?name=MDKSA-2003:077 http://www.security-corporation.com/articles-20030702-005.html
Copyright	Copyright (C) 2004 David Maciejak

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.