Exploit eGroupWare 1.0 - '/sitemgr-site/index.php?category_id' Cross-Site Scripting

[Exploiter]

EDB-ID

25435

Проверка EDB

1. Пройдено

Автор

GULFTECH SECURITY

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2005-1202

Дата публикации

2005-04-18

source: https://www.securityfocus.com/bid/13212/info
 
eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available.
 
The issues arise due to a failure of the application to properly validate user-supplied input. These issues result in cross-site scripting and SQL injection attacks. 

http://egroupware/sitemgr/sitemgr-site/?category_id=4[XSS]