CVE-2004-0875: Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and earlier...

Security readout for executives and security teams

This is an old cross-site scripting issue in PhpGroupWare/webdistro 0.9.16.002 and earlier. A remote attacker could inject HTML or script into the web application, putting users of the vulnerable interface at risk of account misuse, data exposure, or misleading content. Exposure is likely limited to organizations still running PhpGroupWare/webdistro 0.9.16.002 or earlier, especially internet-facing or broadly accessible installations. Modern environments are less likely to be affected unless legacy groupware remains in use. Treat as a legacy web application risk. Prioritize if the product is still deployed, externally reachable, or used by privileged staff. If no instances exist, document non-exposure and close. Mitigation focus: Inventory any PhpGroupWare or webdistro deployments and identify versions.; Check vendor changelog and Gentoo advisory for corrected version guidance.; Upgrade, retire, or isolate versions 0.9.16.002 and earlier..

Prepared

Jun 30, 2026, 02:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.