GCVE - cpe:2.3:a:egroupware:egroupware:1.0.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:egroupware:egroupware:1.0.3:*:*:*:*:*:*:*

part: a version: 1.0.3 update: *

Vendor	Egroupware (`45ac88be-6c9b-5125-bc8c-15b434e3bff4`)
Product	Egroupware (`dcbf3681-ec32-5f8c-8665-3c65169da6b9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:docker/egroupware/egroupware`	purl2cpe	2026-06-01 10:11:11.569233
`pkg:github/egroupware/egroupware`	purl2cpe	2026-06-01 10:11:11.569235

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-1502`	vulnerable	2026-06-08 04:50:20.817694	Details available The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string containing crafted URL protocols. Published: 2008-03-25T19:00:00.000Z Updated: 2024-08-07T08:24:41.897Z Open on db.gcve.eu Reference links http://secunia.com/advisories/29491 http://secunia.com/advisories/31017 http://secunia.com/advisories/32400 http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html http://secunia.com/advisories/32446	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1203`	vulnerable	2026-06-08 04:48:25.925308	Details available Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute arbitrary SQL commands via the (1) filter or (2) cats_app parameter. Published: 2005-04-21T04:00:00.000Z Updated: 2024-08-07T21:44:05.322Z Open on db.gcve.eu Reference links http://sourceforge.net/project/shownotes.php?release_id=320768 http://www.securityfocus.com/bid/13212 http://www.gulftech.org/?node=research&article_id=00069-04202005 http://www.osvdb.org/15753 http://security.gentoo.org/glsa/glsa-200504-24.xml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1202`	vulnerable	2026-06-08 04:48:25.924823	Details available Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbitrary web script or HTML via the (1) ab_id, (2) page, (3) type, or (4) lang parameter to index.php or (5) category_id parameter. Published: 2005-04-21T04:00:00.000Z Updated: 2024-08-07T21:44:05.403Z Open on db.gcve.eu Reference links http://sourceforge.net/project/shownotes.php?release_id=320768 http://www.osvdb.org/15751 http://www.securityfocus.com/bid/13212 http://www.gulftech.org/?node=research&article_id=00069-04202005 http://security.gentoo.org/glsa/glsa-200504-24.xml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1467`	vulnerable	2026-06-08 04:47:54.257498	Details available Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) date or search text field in the calendar module, (2) Field parameter, Filter parameter, QField parameter, Start parameter or Search field in the address module, (3) Subject field in the message module or (4) Subject field in the Ticket module. Published: 2005-02-13T05:00:00.000Z Updated: 2024-08-08T00:53:23.833Z Open on db.gcve.eu Reference links http://www.gentoo.org/security/en/glsa/glsa-200409-06.xml http://www.securityfocus.com/bid/11013 http://sourceforge.net/forum/forum.php?forum_id=401807 http://www.securityfocus.com/archive/1/372603 https://exchange.xforce.ibmcloud.com/vulnerabilities/17078	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.