ACollab 1.2 SQL Injection

------------------------------------------------------------------------ Software................ACollab 1.2 Vulnerability...........SQL Injection Download................http://atutor.ca/acollab/ Release Date............1/31/2011 Tested On...............Windows Vista + XAMPP...

Simple Web Content Management System 1.21 SQL Injection

------------------------------------------------------------------------ Software................Simple Web Content Management System 1.21 Vulnerability...........Authentication Bypass/SQL Injection Download................http://www.allscoop.com/ Release Date............1/31/2011 Tested...

CVE-2009-4941

Cross-site scripting XSS vulnerability in signin.php in ATRC ACollab 1.2 allows remote attackers to inject arbitrary web script or HTML via the f parameter...

CVE-2009-4941

CVE-2009-4941 is a documented cross-site scripting (XSS) vulnerability in ATRC ACollab 1.2, specifically in the script. The issue arises when an attacker can inject arbitrary web script or HTML via the f parameter . The public records (NVD, CVE List, CVE Record) confirm the vulnerable component ...

CVE-2009-4942

Cross-site request forgery CSRF vulnerability in ACollab 1.2 allows remote attackers to hijack the authentication of arbitrary users for requests that add personal agenda items...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in ACollab 1.2 allows remote attackers to hijack the authentication of arbitrary users for requests that add personal agenda items...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ATRC ACollab 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 address parameter to profile.php or the 2 description parameter to events/addevent.php. NOTE: the provenance of this information is unknown; the details ar...