CVE-2012-1028 Cross-site scripting (XSS) vulnerability in bin/index.php in SimpleGroupware 0.742 and other versions before 0.743 allows remote attackers to inject arbitrary web script or HTML via the export paramet...
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in bin/index.php in SimpleGroupware 0.742 and other versions before 0.743 allows remote attackers to inject arbitrary web script or HTML via the export parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simple-groupware simplegroupware | = 0.742 | No fix listed |
References
- 20120206 SimpleGroupware 0.742 Cross-Site-Scripting vulnerability exploit mailing-list
- voxel.dl.sourceforge.net exploit
- 51882 vdb-entry
- simple-groupware-index-xss(73042) vdb-entry