https://www.exploit-db.com/exploits/24403
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200412-1096

EGroupWare1.0.00.003及其更早的版本存在多个跨站脚本攻击（XSS）漏洞。远程攻击者可以借助（1）calendar模块中的date或searchtext字段，（2）address模块中的Field参数，Filter参数，Qfield参数，Start参数或者Search字段，（3）message模块中的Subject字段，或者（4）Ticket模块中的Subuject字段。

source: http://www.securityfocus.com/bid/11013/info

It is reported that eGroupWare is susceptible to multiple cross-site scripting and HTML injection vulnerabilities.

The cross-site scripting issues present themselves in the various parameters of the 'addressbook' and 'calendar' modules. It is also reported that data input through the 'Search' fields of the 'addressbook', 'calendar', and 'search between projects' functionality are not sufficiently sanitized.

An attacker can exploit these issues for theft of cookie-based authentication credentials and other attacks.

Additionally HTML injection vulnerabilities are reported for the eGroupWare 'Messenger' module and 'Ticket' module.

Attackers may potentially exploit these issues to manipulate web content or to steal cookie-based authentication credentials. It may be possible to take arbitrary actions as the victim user.

http://www.example.com/egroupware/index.php?menuaction=calendar.uicalendar.day&date=20040701"><script>alert(document.cookie)</script

来源:BID
名称:11013
链接:http://www.securityfocus.com/bid/11013
来源:GENTOO
名称:GLSA-200409-06
链接:http://www.gentoo.org/security/en/glsa/glsa-200409-06.xml
来源:XF
名称:egroupware-mult-modules-xss(17078)
链接:http://xforce.iss.net/xforce/xfdb/17078
来源:BUGTRAQ
名称:20040822MultipleCrossSiteScriptingVulnerabilitiesineGroupWare
链接:http://www.securityfocus.com/archive/1/372603
来源:sourceforge.net
链接:http://sourceforge.net/forum/forum.php?forum_id=401807