31 matches found
EUVD-2019-18323
Malware in sbrugna...
CVE-2019-8935
Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter...
CVE-2021-3298
Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter...
Cross site scripting
Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter...
CVE-2021-3298
Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter...
CVE-2021-3298
Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter...
CVE-2021-3298
Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter...
CVE-2021-3298
CVE-2021-3298 affects Collabtive 3.1 where an authenticated user can trigger a persistent XSS by submitting a payload in the Address field during profile editing (manageuser.php?action=edit address1). Multiple connected sources (e.g., Exploit-DB entry for the 3.1 XSS payload, Red Hat/NVD/NASL-sty...
CVE-2021-3298: Improper Neutralization of Input During Web Page Generation
Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter...
PT-2021-20005
Name of the Vulnerable Software and Affected Versions Collabtive version 3.1 Description The issue allows for XSS when an authenticated user enters an XSS payload into the address section of the profile edit page. Specifically, this occurs through the address1 parameter in the...
Collabtive Code Issue Vulnerability
Collabtive is a web-based project management system. The system includes features such as project management, document management and time tracking. A code issue vulnerability exists in the avatar upload function of the manageuser.php file in Collabtive versions prior to 2.1, which can be exploit...
CVE-2015-0258
Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a 1 .php3, 2 .php4, 3 .php5, or 4 .phtml extension...
UBUNTU-CVE-2015-0258
Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a 1 .php3, 2 .php4, 3 .php5, or 4 .phtml extension...
CVE-2015-0258
Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a 1 .php3, 2 .php4, 3 .php5, or 4 .phtml extension...
CVE-2015-0258
Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a 1 .php3, 2 .php4, 3 .php5, or 4 .phtml extension...
CVE-2015-0258: Unrestricted Upload of File with Dangerous Type
Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a 1 .php3, 2 .php4, 3 .php5, or 4 .phtml extension...
Cross site scripting
Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter...
CVE-2019-8935
Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter...