CVE-2006-3237

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-27 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in index.php in Enterprise Groupware System (EGS) 1.2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the module parameter.

Affected products

Senokian Solutions Enterprise Groupware Systems: through 1.2.4; 1.0, 1.0_rc1, 1.0_rc2, 1.0_rc3, 1.0_rc4, 1.0_rc5 (+8)

References

http://pridels0.blogspot.com/2006/06/enterprise-groupware-system-xss-vuln.html
http://secunia.com/advisories/20757
http://securitytracker.com/id?1016358
http://www.securityfocus.com/bid/18590
http://www.vupen.com/english/advisories/2006/2483
https://exchange.xforce.ibmcloud.com/vulnerabilities/27282
http://pridels0.blogspot.com/2006/06/enterprise-groupware-system-xss-vuln.html
http://secunia.com/advisories/20757
http://securitytracker.com/id?1016358
http://www.securityfocus.com/bid/18590
http://www.vupen.com/english/advisories/2006/2483
https://exchange.xforce.ibmcloud.com/vulnerabilities/27282

Get alerted when CVE-2006-3237 or the next vulnerability affects your stack