Lucene search
+L

2 matches found

NVD
NVD
added 2009/08/12 10:30 a.m.19 views

CVE-2008-6949

Multiple cross-site request forgery CSRF vulnerabilities in Collabtive 0.4.8 allow remote attackers to hijack the authentication of administrators for requests that 1 submit or edit a new project, or 2 upload files to a project, or 3 attach files to messages via unknown vectors. NOTE: these issue...

6.8CVSS7.3AI score0.0179EPSS
SaveExploits1References2
CVE
CVE
added 2009/08/12 10:0 a.m.46 views

CVE-2008-6949

CVE-2008-6949 affects Collabtive 0.4.8 with multiple CSRF vulnerabilities that let an attacker hijack administrator authentication to perform actions such as submitting or editing a project, uploading files to a project, or attaching files to messages. The issues may be leveraged with other vulne...

6.8CVSS7.4AI score0.0179EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder