CVE-2005-1202
eGroupware - Cross-Site Scripting via ab_id, page, type, lang, or category_id Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-1202. PoCs published by GulfTech Security.
AI-analyzed exploit summary The provided text describes multiple input validation vulnerabilities in eGroupWare, including XSS and SQL injection. It lists several URLs demonstrating XSS vulnerabilities but does not include executable exploit code.
Description
Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbitrary web script or HTML via the (1) ab_id, (2) page, (3) type, or (4) lang parameter to index.php or (5) category_id parameter.
Exploits (2)
The provided text describes multiple input validation vulnerabilities in eGroupWare, including XSS and SQL injection. It lists several URLs demonstrating XSS vulnerabilities but does not include executable exploit code.
The provided text describes CVE-2005-1202, an input validation vulnerability in eGroupWare leading to XSS and SQL injection. It includes a sample URL demonstrating the XSS vulnerability but lacks executable exploit code.