The remote host is running eGroupWare, a web-based groupware solution. It is reported that versions prior 1.0.0.004 are prone to a cross-site scripting issue. An attacker may steal cookie-based authentication credentials from a legitimate user by sending malformed links to this web site.

遠端的 eGroupware 版本容易遭受跨網站指令碼攻擊。遠端攻擊者可誘騙合法使用者點擊惡意製作的 URL，藉此竊取其 Cookie。

據報，eGroupware 中還有其他跨網站指令碼弱點，但 Nessus 尚未測試這些問題。

远程版本的 eGroupware 容易遭受跨站脚本攻击。这允许远程攻击者通过欺骗合法用户点击恶意构建的 URL 来假冒他们，以此窃取他们的 Cookie。

据报告，eGroupware 存在其他跨站脚本漏洞，但 Nessus 尚未对这些问题进行测试。

eGroupwareのリモートバージョンは、クロスサイトスクリプティング攻撃に脆弱です。これにより、リモートの攻撃者が、悪意を持って細工されたURLをクリックするように誘導して、正当なユーザーのクッキーを盗む可能性があります。

eGroupwareには、報告されているところによれば、他のクロスサイトスクリプティングの脆弱性もありますが、Nessusではそれらの問題はチェックされていません。

The remote version of eGroupware is vulnerable to a cross-site scripting attack.  This could allow a remote attacker to steal the cookies of a legitimate user by tricking them into clicking a maliciously crafted URL.

eGroupware reportedly has other cross-site scripting vulnerabilities, though Nessus has not tested for those issues.

The remote host is affected by the vulnerability described in GLSA-200409-06 (eGroupWare: Multiple XSS vulnerabilities)

    Joxean Koret recently discovered multiple cross site scripting     vulnerabilities in various modules for the eGroupWare suite. This     includes the calendar, address book, messenger and ticket modules.
  Impact :

    These vulnerabilities give an attacker the ability to inject and     execute malicious script code, potentially compromising the victim's     browser.
  Workaround :

    There is no known workaround at this time. All users are encouraged to     upgrade to the latest available version of eGroupWare.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
2132	eGroupWare < 1.0.0.004 Multiple XSS	Nessus Network Monitor	CGI	2004/8/18	2019/3/6	low
14358	eGroupWare <= 1.0.00.003 多個模組 XSS	Nessus	CGI abuses : XSS	2004/8/23	2025/9/29	medium
14358	eGroupWare <= 1.0.00.003 多个模块 XSS	Nessus	CGI abuses : XSS	2004/8/23	2025/9/29	medium
14358	eGroupWare <= 1.0.00.003の複数のモジュールのXSS	Nessus	CGI abuses : XSS	2004/8/23	2025/9/29	medium
14358	eGroupWare <= 1.0.00.003 Multiple Module XSS	Nessus	CGI abuses : XSS	2004/8/23	2025/9/29	medium
14653	GLSA-200409-06 : eGroupWare: Multiple XSS vulnerabilities	Nessus	Gentoo Local Security Checks	2004/9/3	2021/1/6	medium

检测

插件搜索

low

medium

medium

medium

medium

medium