CVE-2004-0875: Phpgroupware

Medium severity, CVSS 6.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and earlier allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to the wiki module.

Affected products

• Phpgroupware Phpgroupware: version 0.9.12 only; version 0.9.13 only; version 0.9.14.003 only; version 0.9.14.005 only; version 0.9.14.006 only; version 0.9.14.007 only; …

Published 2004-12-23. Last modified 2026-06-16.