215 matches found
Debian: Security Advisory (DLA-2125-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2125-1] collabtive security update
Package : collabtive Version : 2.0+dfsg-5+deb8u1 CVE ID : CVE-2015-0258 An issue has been found in collabtive, a web-based project management software. Due to missing checks an attacker could upload scripts, which would execute code on the server by accessing for example avatar images. For Debian...
DLA-2125-1 collabtive - security update
Bulletin has no description...
CVE-2015-0258
Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a 1 .php3, 2 .php4, 3 .php5, or 4 .phtml extension...
CVE-2015-0258
Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a 1 .php3, 2 .php4, 3 .php5, or 4 .phtml extension...
UBUNTU-CVE-2015-0258
Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a 1 .php3, 2 .php4, 3 .php5, or 4 .phtml extension...
CVE-2015-0258
Collabtive up to version 2.0/2.1 had an avatar-upload input validation flaw in manageuser.php that could enable an authenticated user to upload crafted files (.php3/.php4/.php5/.phtml) and execute arbitrary code. Public advisories (USN-4590-1, DLA-2125-1) and Debian/Nessus entries describe fixes ...
CVE-2013-5027
Collabtive 1.0 has incorrect access control...
Improper access control
Collabtive 1.0 has incorrect access control...
CVE-2013-5027
Collabtive 1.0 has incorrect access control...
CVE-2013-5027
CVE-2013-5027 (Collabtive 1.0) is described in the HTB23169 advisory as an improper access control vulnerability. The root cause is insufficient access restrictions in the installation flow, allowing a remote attacker to abuse the /install.php script (action=step3) to create a new administrative ...
Collabtive <= 3.1 XSS Vulnerability
Collabtive is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2019-8935
Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter...
CVE-2019-8935
Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter...
Cross site scripting
Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter...
CVE-2019-8935
Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter...
CVE-2019-8935
Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter...
CVE-2019-8935
CVE-2019-8935 corresponds to a stored/reflected XSS in Collabtive 3.1. The vulnerability is triggered via the manageuser.php?action=profile id parameter, allowing injection that could affect an authenticated user. Connected sources provide multiple vendor/cve references confirming the XSS impact ...
Collabtive 3.1 Cross Site Scripting
Reflected Cross-site Scripting Vulnerability in Collabtive 3.1 Information -------------------- Advisory by Netsparker Name: Reflected Cross-site Scripting in Collabtive 3.1 Affected Software: Collabtive Affected Versions: 3.1 Homepage: https://www.collabtive.com/ Vulnerability: Reflected...
Collabtive 2.0 Shell Upload Vulnerability
Collabtive version 2.0 suffers from an arbitrary file upload vulnerability. Vulnerability title: Arbitrary File Upload In Collabtive CVE: CVE-2015-0258 Vendor: Collabtive Product: Collabtive Affected version: 2.0 Fixed version: 2.1 Reported by: Arturo Rodriguez Details: It was discovered that...