eGroupware Community Edition Stored XSS vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2017-14920 · ADVISORY
• EGroupware/egroupware commit 0ececf8 · WEB
• EGroupware/egroupware · PACKAGE
• openwall.com/lists/oss-security/2017/09/28/12 · WEB

Autres vulnérabilités de egroupware/egroupware

• CVE-2026-40187ÉLEVÉE 8.6In egroupware version 26.0 and earlier, an authenticated administrator can achieve OS-level Remote Code Execution (RCE) by uploading a malic…
• CVE-2026-27823ÉLEVÉE 8.7A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an authenticated attacker t…
• CVE-2026-45016MOYENNE 6.5EGroupware Vulnerable to Local File Inclusion via file:// URI in Mail Compose
• CVE-2026-22243ÉLEVÉE 8.8EGroupware is a Web based groupware server written in PHP. A SQL Injection vulnerability exists in the core components of EGroupware prior t…
• CVE-2024-40614CRITIQUE 9.8EGroupware before 23.1.20240624 mishandles an ORDER BY clause. This leads to json.php?menuaction=EGroupware\Api\Etemplate\Widget\Nextmatch::…