CVE-2009-1773

CVE-2009-1773 affects activeCollab 2.1 Corporate. A vulnerable path is the login script where an invalid re_route parameter causes an error message that reveals the installation path, leading to potential information disclosure. The linked sources describe this as a remote information disclosure ...

CVE-2009-1773: Improper Input Validation

activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid reroute parameter to the login script, which reveals the installation path in an error message...

CVE-2009-1772: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in activeCollab 2.1 Corporate allows remote attackers to inject arbitrary web script or HTML via the reroute parameter to the login script...

activeCollab XSS and Full Path Disclosure

activeCollab XSS and Full Path Disclosure Vuln. discovered by : r0t Date: 17 May 2009 Vendor:http://www.activecollab.com/ affected versions:2.1, corporate other versions also can be affected. orginal advisory: http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html 1.Cross-Si...