PT-2012-4170

Name of the Vulnerable Software and Affected Versions Collabtive versions prior to 0.7.6 Description The issue allows remote authenticated users, and possibly unauthenticated attackers, to bypass intended access restrictions. This is achieved by uploading an avatar file with an accepted...

Collabtive Management v0.61 - Multiple Web Vulnerabilities

Document Title: =============== Collabtive Management v0.61 - Multiple Web Vulnerabilities Release Date: ============= 2011-07-10 Vulnerability Laboratory ID VL-ID: ==================================== 136 Product & Service Introduction: =============================== Unlimited projects,...

Collabtive Management v0.61 - Multiple Web Vulnerabilities

Document Title: =============== Collabtive Management v0.61 - Multiple Web Vulnerabilities Release Date: ============= 2011-07-10 Vulnerability Laboratory ID VL-ID: ==================================== 136 Product & Service Introduction: =============================== Unlimited projects,...

Collabtive v065 Multiple (CSRF/XSRF) Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Collabtive Multiple Remote Input Validation Vulnerabilities

Collabtive is prone to multiple remote input-validation vulnerabilities including cross-site scripting, HTML-injection, and directory-traversal issues. Attackers can exploit these issues to obtain sensitive information, execute arbitrary script code, and steal cookie-based authentication...

Collabtive Multiple Remote Input Validation Vulnerabilities

Collabtive is prone to multiple remote input-validation vulnerabilities including cross-site scripting, HTML-injection, and directory-traversal issues. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Collabtive 0.6.5 XSS / XSRF / Directory Traversal

============================== Vulnerability ID: HTB22907 Reference: http://www.htbridge.ch/advisory/directorytraversalincollabtive.html Product: Collabtive Vendor: Open Dynamics http://collabtive.o-dyn.de/ Vulnerable Version: 0.6.5 and probably prior versions Vendor Notification: 17 March 2011...

HTB22907: Directory Traversal in Collabtive

Vulnerability ID: HTB22907 Reference: http://www.htbridge.ch/advisory/directorytraversalincollabtive.html Product: Collabtive Vendor: Open Dynamics http://collabtive.o-dyn.de/ Vulnerable Version: 0.6.5 and probably prior versions Vendor Notification: 17 March 2011 Vulnerability Type: Directory...

Collabtive 0.6.5 - Multiple Remote Input Validation Vulnerabilities

Collabtive 0.6.5 - Multiple Remote Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/47105/info Collabtive is prone to multiple remote input-validation vulnerabilities including cross-site scripting, HTML-injection, and directory-traversal issues. Attackers can exploit...

HTB22906: XSS vulnerabilities in Collabtive

Vulnerability ID: HTB22906 Reference: http://www.htbridge.ch/advisory/xssvulnerabilitiesincollabtive.html Product: Collabtive Vendor: Open Dynamics http://collabtive.o-dyn.de/ Vulnerable Version: 0.6.5 and probably prior versions Vendor Notification: 17 March 2011 Vulnerability Type: XSS Risk...

HTB22908: XSRF (CSRF) in Collabtive

Vulnerability ID: HTB22908 Reference: http://www.htbridge.ch/advisory/xsrfcsrfincollabtive.html Product: Collabtive Vendor: Open Dynamics http://collabtive.o-dyn.de/ Vulnerable Version: 0.6.5 and probably prior versions Vendor Notification: 17 March 2011 Vulnerability Type: CSRF Cross-Site Reques...

Collabtive 0.6.5 - Multiple Remote Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/47105/info Collabtive is prone to multiple remote input-validation vulnerabilities including cross-site scripting, HTML-injection, and directory-traversal issues. Attackers can exploit these issues to obtain sensitive information, execute arbitrary script...

Collabtive 0.6.5 Cross Site Scripting

------------------------------------------------------------------------ Software................Collabtive 0.6.5 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://collabtive.o-dyn.de/ Vendor Contact Date.....3/10/2011 Disclosure...

Collabtive 0.6.5 Cross Site Request Forgery

------------------------------------------------------------------------ --Description-- A cross-site request forgery vulnerability in Collabtive 0.6.5 can be exploited to create a new admin. --PoC--...

Multiple Vulnerabilities in Collabtive

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Collabtive which could be exploited to perform cross-site scripting and cross-site request forgery attacks and gain access to sensitive information. 1 Cross-site scripting XSS vulnerability in Collabtive 1.1 The...

Collabtive 'managechat.php' SQL Injection Vulnerability

This host is running Collabtive and is prone SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbcollabtivesqlinjvuln.nasl 5263 2017-02-10 13:45:51Z teissa $ Collabtive 'managechat.php' SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Networks GmbH...

Collabtive 'managechat.php' SQL Injection Vulnerability

Collabtive is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:collabtive:collabtive...

CVE-2010-4269

SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstartUSERTOID cookie in a pull action...

Sql injection

SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstartUSERTOID cookie in a pull action...

CVE-2010-4269

CVE-2010-4269 affects Collabtive 0.65 (managechat.php): a SQL Injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the chatstart[USERTOID] cookie in a pull action. OpenVAS entries confirm Collabtive "managechat.php" SQL Injection vulnerability; no product/ven...