The remote host seems to be running PhpGroupWare, a multi-user groupware suite written in PHP. This version has been reported prone to HTML injection vulnerabilities through 'index.php'. These issues present themself due to a lack of sufficient input validation performed on form fields used by PHPGroupWare modules. A malicious attacker may inject arbitrary HTML and script code using these form fields that may be incorporated into dynamically generated web content.

Update to version 0.9.16 RC3 or newer

• http://www.phpgroupware.org/

---

Updated on 2015-03-25