CVE-2003-0504: Phpgroupware

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware 0.9.14.003 (aka webdistro) allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to index.php in the addressbook module.

Affected products

• Phpgroupware Phpgroupware: version 0.9.14.003 only

Published 2003-08-07. Last modified 2026-06-16.