CVE-2008-6948

Unrestricted file upload vulnerability in Collabtive 0.4.8 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and using a text/plain MIME type, then accessing it via a direct request to the file in files/, related to 1 the showproject acti...

Unrestricted file upload

Unrestricted file upload vulnerability in Collabtive 0.4.8 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and using a text/plain MIME type, then accessing it via a direct request to the file in files/, related to 1 the showproject acti...

CVE-2008-6946

CVE-2008-6946 describes a cross-site scripting (XSS) vulnerability in Collabtive 0.4.8. The issue affects manageproject.php where the project name is not properly sanitized during an admin editform action, enabling user-assisted remote attackers to inject arbitrary web script or HTML. The core de...

CVE-2008-6949

CVE-2008-6949 affects Collabtive 0.4.8 with multiple CSRF vulnerabilities that let an attacker hijack administrator authentication to perform actions such as submitting or editing a project, uploading files to a project, or attaching files to messages. The issues may be leveraged with other vulne...

CVE-2008-6949

Multiple cross-site request forgery CSRF vulnerabilities in Collabtive 0.4.8 allow remote attackers to hijack the authentication of administrators for requests that 1 submit or edit a new project, or 2 upload files to a project, or 3 attach files to messages via unknown vectors. NOTE: these issue...

PT-2009-1060 · Linux +1 · Kpartx +3

Name of the Vulnerable Software and Affected Versions: device-mapper-multipath versions 0.4.5 through 0.4.8 multipath-tools versions prior to 0.4.8-r1 kpartx version 0.4.7 Description: The issue concerns the Device Mapper multipathing driver, which uses world-writable permissions for the socket...

Collabtive 0.4.8 (XSS/Auth Bypass/Upload) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== Collabtive 0.4.8 XSS/Auth Bypass/Upload Multiple Vulnerabilities ================================================================== Collabtive 0.4.8 Multiple Vulnerabilitie...

Collabtive 0.4.8 - Cross-Site Scripting / Authentication Bypass / Arbitrary File Upload

Collabtive 0.4.8 Multiple Vulnerabilities Name Multiple Vulnerabilities in Collabtive Systems Affected Collabtive 0.4.8 and possibly earlier versions Severity High Impact CVSSv2 High 8/10, vector: AV:N/AC:L/Au:S/C:P/I:C/A:P Vendor http://collabtive.o-dyn.de/ Advisory...