Cross-Site Scripting Vulnerability in EGroupware by EGroupware
CVE-2010-3314

Currently unrated

Key Information:

Vendor: Egroupware
Status: Egroupware
Vendor: CVE Published:; 22 September 2010

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2010-3314?

A cross-site scripting (XSS) vulnerability exists in the login.php component of EGroupware, allowing remote attackers to inject arbitrary web scripts or HTML code through the 'lang' parameter. This security flaw may affect specific versions of EGroupware and EPL before their respective patches were released, posing a risk to users and their data integrity.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2010-3314 - Proof of Concept