CVE:CVE-2004-2574
CNNVD:CNNVD-200412-783
phpGroupWare 0.9.14.005及其更早版本的index.php存在跨站脚本攻击（XSS）漏洞。远程攻击者可以借助calendar.uicalendar.planner menuaction中的data参数注入任意web脚本或HTML。
solution:Upgrade phpgroupware phpgroupware to a higher version than 0.9.16.005,0.9.16.000,0.9.16.002,0.9.16.003,and avoid the version (,0.9.16.005],0.9.16.000,0.9.16.002,0.9.16.003