PhpGroupWare Main Screen Message Script Injection Flaw

Summary
The remote host seems to be running PhpGroupWare, is a multi-user groupware suite written in PHP. This version is vulnerable to script injection, a malicious admin can inject script code into the main screen message.
Solution
Update to version 0.9.16.007 or newer.
References

Updated on 2015-03-25