Description
Cross-site scripting (XSS) vulnerability in index.php in Enterprise Groupware System (EGS) 1.2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the module parameter.
References
- egs-index-xss(27282) vdb-entry
- http://pridels0.blogspot.com/2006/06/enterprise-groupware-system-xss-vuln.html
- 20757 third-party-advisory
- 1016358 vdb-entry
- ADV-2006-2483 vdb-entry
- 18590 vdb-entry