CVE-2009-1773

activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid reroute parameter to the login script, which reveals the installation path in an error message...

Design/Logic Flaw

activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid reroute parameter to the login script, which reveals the installation path in an error message...

CVE-2009-1773

activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid reroute parameter to the login script, which reveals the installation path in an error message...

CVE-2009-1772

CVE-2009-1772 is an XSS vulnerability in activeCollab 2.1 Corporate where the re_route parameter in the login script allows remote attackers to inject arbitrary web script or HTML. The connected documents corroborate the vector as a login-script parameter, but do not provide additional exploitati...