CVE-2012-1028

CVE-2012-1028 concerns a cross-site scripting (XSS) flaw in SimpleGroupware where the vulnerable code is in bin/index.php. The issue arises from the export parameter, permitting remote attackers to inject arbitrary web script or HTML. Affected: SimpleGroupware 0.742 and other versions before 0.74...