CVE-2012-2211

Name: CVE-2012-2211
Creator: NVD / NIST
Published: 2012-11-22T12:28:40.993+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.23%

Last modified Jun 16, 2026

CVE-2012-2211 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in phpgwapi/inc/common_functions_inc.php in eGroupware before 1.8.004.20120405 allows remote attackers to inject arbitrary web script or HTML via the menuaction parameter to etemplate/process_exec.php. NOTE: some of these details are obtained from third party information.. EPSS estimates a 1.23% chance of exploitation in the next 30 days.

Description

Cross-site scripting (XSS) vulnerability in phpgwapi/inc/common_functions_inc.php in eGroupware before 1.8.004.20120405 allows remote attackers to inject arbitrary web script or HTML via the menuaction parameter to etemplate/process_exec.php. NOTE: some of these details are obtained from third party information.

Metrics

EPSS Probability

1.23%

65.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-79

Affected Software

Vendor	Product	Versions
Egroupware	Egroupware	<= 1.8.002.20111111

References

http://packetstormsecurity.org/files/111626/egroupware-xss.txtExploit
http://secunia.com/advisories/48703Vendor Advisory
http://www.egroupware.org/changelog
http://packetstormsecurity.org/files/111626/egroupware-xss.txtExploit
http://secunia.com/advisories/48703Vendor Advisory
http://www.egroupware.org/changelog

Timeline

Published: Nov 22, 2012
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2012-2211?

How severe is CVE-2012-2211?

Severity scoring for CVE-2012-2211 is pending analysis. The EPSS model estimates a 1.23% probability of exploitation in the next 30 days.

How do I fix CVE-2012-2211?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2012-2211?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST