CVE-2004-1384: Multiple cross-site scripting (XSS) vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote att...

Security readout for executives and security teams

CVE-2004-1384 is an old phpGroupWare cross-site scripting issue affecting version 0.9.16.003 and earlier. A remote attacker could inject script or HTML through several web parameters. Business risk depends on whether this legacy groupware is still reachable, especially where authenticated users or administrators access it. Exposure is most likely in legacy phpGroupWare deployments at version 0.9.16.003 or earlier. Internet-facing instances and authenticated portals raise concern because XSS impact depends on user trust, session handling, and reachable application functions. Treat this as a legacy exposure cleanup item unless phpGroupWare is internet-facing or administrator-used. Prioritize confirmation quickly, then upgrade, retire, or restrict access if affected versions remain deployed. Mitigation focus: Inventory phpGroupWare deployments and identify versions in use.; Upgrade away from phpGroupWare 0.9.16.003 and earlier per vendor or distribution guidance.; Restrict external access to any unpatched legacy instance..

Prepared

Jun 30, 2026, 01:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.