CVEvulnerability
CVE-2009-4416
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-12-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in login.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter whose name begins with the "phpgw_" sequence.
Affected configurations
• phpgroupware phpgroupware 0.9.16.12
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://kambing.ui.ac.id/gentoo-portage/www-apps/phpgroupware/files/phpgroupware-SA35519.patch Patch
- http://secunia.com/advisories/35519 Vendor Advisory
- http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/login.php?r1=19063&r2=19117&pathrev=19117&sortby=date&root=phpgroupware svn.savannah.gnu.org
- http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG?r1=17045&r2=19117&pathrev=19117&sortby=date&root=phpgroupware svn.savannah.gnu.org
- http://svn.savannah.gnu.org/viewvc?view=rev&root=phpgroupware&sortby=date&revision=19117 svn.savannah.gnu.org
- http://www.openwall.com/lists/oss-security/2009/12/20/1 www.openwall.com
- http://www.osvdb.org/56179 www.osvdb.org
- http://www.securityfocus.com/bid/35761 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51923 exchange.xforce.ibmcloud.com
- http://kambing.ui.ac.id/gentoo-portage/www-apps/phpgroupware/files/phpgroupware-SA35519.patch Patch
- http://secunia.com/advisories/35519 Vendor Advisory
- http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/login.php?r1=19063&r2=19117&pathrev=19117&sortby=date&root=phpgroupware svn.savannah.gnu.org
- http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG?r1=17045&r2=19117&pathrev=19117&sortby=date&root=phpgroupware svn.savannah.gnu.org
- http://svn.savannah.gnu.org/viewvc?view=rev&root=phpgroupware&sortby=date&revision=19117 svn.savannah.gnu.org
- http://www.openwall.com/lists/oss-security/2009/12/20/1 www.openwall.com
- http://www.osvdb.org/56179 www.osvdb.org
- http://www.securityfocus.com/bid/35761 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51923 exchange.xforce.ibmcloud.com