eGroupware Community Edition Stored XSS vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2017-14920 · ADVISORY
• EGroupware/egroupware commit 0ececf8 · WEB
• EGroupware/egroupware · PACKAGE
• openwall.com/lists/oss-security/2017/09/28/12 · WEB

Más vulnerabilidades de egroupware/egroupware

• CVE-2026-40187ALTO 8.6In egroupware version 26.0 and earlier, an authenticated administrator can achieve OS-level Remote Code Execution (RCE) by uploading a malic…
• CVE-2026-27823ALTO 8.7A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an authenticated attacker t…
• CVE-2026-45016MEDIO 6.5EGroupware Vulnerable to Local File Inclusion via file:// URI in Mail Compose
• CVE-2026-22243ALTO 8.8EGroupware is a Web based groupware server written in PHP. A SQL Injection vulnerability exists in the core components of EGroupware prior t…
• CVE-2024-40614CRÍTICO 9.8EGroupware before 23.1.20240624 mishandles an ORDER BY clause. This leads to json.php?menuaction=EGroupware\Api\Etemplate\Widget\Nextmatch::…