CVE-2012-2211

Cross-site scripting XSS vulnerability in phpgwapi/inc/commonfunctionsinc.php in eGroupware before 1.8.004.20120405 allows remote attackers to inject arbitrary web script or HTML via the menuaction parameter to etemplate/processexec.php. NOTE: some of these details are obtained from third party...

CVE-2012-2211

CVE-2012-2211 is a documented cross-site scripting (XSS) vulnerability in eGroupware involving the file path phpgwapi/inc/common_functions_inc.php . The issue arises in versions prior to 1.8.004.20120405 , where an attacker can craft input to the parameter menuaction used by etemplate/process_exe...