リモートホストは、PHPで書かれたマルチユーザーグループウェアスイートのPhpGroupWareを実行しているようです。

このバージョンはスクリプトインジェクションに脆弱であるため、悪意のある管理者がメイン画面のメッセージにスクリプトコードを挿入する可能性があります。

遠端主機似乎正在執行 PhpGroupWare，這是一個以 PHP 編寫的多使用者群組軟體套件。

此版本容易受到指令碼注入攻擊，惡意管理員可利用此弱點將指令碼注入主畫面訊息。

Several vulnerabilities have been discovered in phpgroupware, a web-based groupware system written in PHP. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CAN-2005-2498     Stefan Esser discovered another vulnerability in the     XML-RPC libraries that allows injection of arbitrary PHP     code into eval() statements. The XMLRPC component has     been disabled.

  - CAN-2005-2600

    Alexander Heidenreich discovered a cross-site scripting     problem in the tree view of FUD Forum Bulletin Board     Software, which is also present in phpgroupware.

  - CAN-2005-2761

    A global cross-site scripting fix has also been included     that protects against potential malicious scripts     embedded in CSS and xmlns in various parts of the     application and modules.

This update also contains a postinst bugfix that has been approved for the next update to the stable release.

The remote host seems to be running PhpGroupWare, a multi-user groupware suite written in PHP.

This version is vulnerable to script injection, whereby a malicious admin can inject script code into the main screen message.

远程主机似乎正在运行 PhpGroupWare，这是一个以 PHP 编写的多用户群件套件。

此版本容易受到脚本注入漏洞的影响，恶意管理员可借此将脚本代码注入主屏幕消息。

The remote host seems to be running PHPGroupWare, a groupware system implemented in PHP. This version is reported vulnerable to a flaw where the Administrator can inject script code into the browsers of unsuspecting users.

ID	名稱	產品	系列	已發布	已更新	嚴重性
19754	phpGroupWareメイン画面メッセージ本文のXSS	Nessus	CGI abuses : XSS	2005/9/19	2024/6/4	medium
19754	phpGroupWare 主畫面訊息內文 XSS	Nessus	CGI abuses : XSS	2005/9/19	2024/6/4	medium
19568	Debian DSA-798-1 : phpgroupware - several vulnerabilities	Nessus	Debian Local Security Checks	2005/9/6	2021/1/4	medium
19754	phpGroupWare Main Screen Message Body XSS	Nessus	CGI abuses : XSS	2005/9/19	2024/6/4	medium
19754	phpGroupWare 主屏幕消息正文 XSS	Nessus	CGI abuses : XSS	2005/9/19	2024/6/4	medium
3202	PHPGroupWare < 0.9.16.007 Main Screen Message Script Injection	Nessus Network Monitor	CGI	2005/9/2	2019/3/6	low

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

low