Multiple cross-site scripting (XSS) vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) kp3, (2) type, (3) msg, (4) forum_id, (5) pos, (6) cats_app, (7) cat_id, (8) msgball[msgnum], (9) fldball[acctnum] parameters to index.php or (10) ticket_id to viewticket_details.php.

The remote host is affected by the vulnerability described in GLSA-200501-08 (phpGroupWare: Various vulnerabilities)

    Several flaws were discovered in phpGroupWare making it vulnerable to     cross-site scripting attacks, SQL injection, and full path disclosure.
  Impact :

    These vulnerabilities could allow an attacker to perform cross-site     scripting attacks, execute SQL queries, and disclose the full path of     the web directory.
  Workaround :

    There is no known workaround at this time.

The remote host seems to be running PhpGroupWare, a multi-user groupware suite written in PHP. 

The remote version of this software is vulnerable to multiple issues :

  - A cross-site scripting issue may allow an attacker to     steal the credentials of third-party users of the remote     host. (CVE-2004-1384)

  - A SQL injection vulnerability may allow an attacker to     execute arbitrary SQL statements against the remote     database. (CVE-2004-1383)   
  - An information disclosure vulnerability exists that     is triggered when a specially crafted URL request is     sent to the 'index.php' script. (CVE-2004-1385)

The remote host seems to be running PHPGroupWare, a groupware system implemented in PHP. This version is reported to be vulnerable to a cross-site scripting issue and a SQL injection vulnerability. An attacker may gain access to unauthorized information or may steal cookie-based authentication credentials from a legitimate user by sending the user a malformed link to this web site.

ID	Name	Product	Family	Severity
16399	GLSA-200501-08 : phpGroupWare: Various vulnerabilities	Nessus	Gentoo Local Security Checks	high
15983	phpGroupWare <= 0.9.16.003 Multiple Vulnerabilities	Nessus	CGI abuses	high
2457	PHPGroupWare Multiple XSS and SQL Injection Vulnerabilities	Nessus Network Monitor	CGI	high

Detections

Analytics

CVE-2004-1384

medium

Tenable Plugins

high

high

high