Vulnerability Details CVE-2012-1028
Cross-site scripting (XSS) vulnerability in bin/index.php in SimpleGroupware 0.742 and other versions before 0.743 allows remote attackers to inject arbitrary web script or HTML via the export parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.2%
CVSS Severity
CVSS v2 Score 4.3
References
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0028.html
- http://voxel.dl.sourceforge.net/project/simplgroup/README.md
- http://www.securityfocus.com/bid/51882
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73042
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0028.html
- http://voxel.dl.sourceforge.net/project/simplgroup/README.md
- http://www.securityfocus.com/bid/51882
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73042
Products affected by CVE-2012-1028
-
cpe:2.3:a:simple-groupware:simplegroupware:0.742