CVE Vulnerabilities

CVE-2006-3237

Published: Jun 27, 2006 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.6 LOW
AV:N/AC:H/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Cross-site scripting (XSS) vulnerability in index.php in Enterprise Groupware System (EGS) 1.2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the module parameter.

Affected Software

NameVendorStart VersionEnd Version
Enterprise_groupware_systemsSenokian_solutions*1.2.4 (including)
Enterprise_groupware_systemsSenokian_solutions1.0 (including)1.0 (including)
Enterprise_groupware_systemsSenokian_solutions1.0_rc1 (including)1.0_rc1 (including)
Enterprise_groupware_systemsSenokian_solutions1.0_rc2 (including)1.0_rc2 (including)
Enterprise_groupware_systemsSenokian_solutions1.0_rc3 (including)1.0_rc3 (including)
Enterprise_groupware_systemsSenokian_solutions1.0_rc4 (including)1.0_rc4 (including)
Enterprise_groupware_systemsSenokian_solutions1.0_rc5 (including)1.0_rc5 (including)
Enterprise_groupware_systemsSenokian_solutions1.1 (including)1.1 (including)
Enterprise_groupware_systemsSenokian_solutions1.01 (including)1.01 (including)
Enterprise_groupware_systemsSenokian_solutions1.1.1 (including)1.1.1 (including)
Enterprise_groupware_systemsSenokian_solutions1.1.2 (including)1.1.2 (including)
Enterprise_groupware_systemsSenokian_solutions1.2 (including)1.2 (including)
Enterprise_groupware_systemsSenokian_solutions1.2.1 (including)1.2.1 (including)
Enterprise_groupware_systemsSenokian_solutions1.2.2 (including)1.2.2 (including)
Enterprise_groupware_systemsSenokian_solutions1.2.3 (including)1.2.3 (including)

References