EUVD-2013-2591

Malware in sbrugna...

EUVD-2009-1452

Malware in sbrugna...

EUVD-2009-1453

Malware in sbrugna...

CVE-2013-2652

CRLF injection vulnerability in help/helplanguage.php in WebCollab 3.30 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the item parameter...

Crlf injection

CRLF injection vulnerability in help/helplanguage.php in WebCollab 3.30 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the item parameter...

CVE-2013-2652

CRLF injection vulnerability in help/helplanguage.php in WebCollab 3.30 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the item parameter...

CVE-2013-2652

CRLF injection vulnerability in WebCollab

WebCollab 'item' Parameter HTTP Response Splitting Vulnerability

WebCollab is prone to HTTP response splitting vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ISecAuditors Security Advisories] HTTP Response Splitting Vulnerability in WebCollab <= v3.30

============================================= INTERNET SECURITY AUDITORS ALERT 2013-011 - Original release date: March 21st, 2013 - Last revised: March 21st, 2013 - Discovered by: Manuel Garcia Cardenas - Severity: 5/10 CVSS Base Score - CVE-ID: CVE-2013-2652...

WebCollab 3.30 HTTP Response Splitting

============================================= INTERNET SECURITY AUDITORS ALERT 2013-011 - Original release date: March 21st, 2013 - Last revised: March 21st, 2013 - Discovered by: Manuel García Cárdenas - Severity: 5/10 CVSS Base Score - CVE-ID: CVE-2013-2652...

CVE-2009-1455

Multiple cross-site request forgery CSRF vulnerabilities in WebCollab before 2.50 aka Billy Goat allow remote attackers to hijack the authentication of administrators for requests that change an arbitrary password or have other unspecified impact...

CVE-2009-1454

Cross-site scripting XSS vulnerability in tasks.php in WebCollab before 2.50 aka Billy Goat allows remote attackers to inject arbitrary web script or HTML via the selection parameter in a todo action...

Cross site scripting

Cross-site scripting XSS vulnerability in tasks.php in WebCollab before 2.50 aka Billy Goat allows remote attackers to inject arbitrary web script or HTML via the selection parameter in a todo action...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in WebCollab before 2.50 aka Billy Goat allow remote attackers to hijack the authentication of administrators for requests that change an arbitrary password or have other unspecified impact...

CVE-2009-1454

Cross-site scripting XSS vulnerability in tasks.php in WebCollab before 2.50 aka Billy Goat allows remote attackers to inject arbitrary web script or HTML via the selection parameter in a todo action...

CVE-2009-1454

CVE-2009-1454 is an XSS in WebCollab’s tasks.php prior to version 2.50 (aka Billy Goat). The issue allows remote attackers to inject arbitrary script/HTML via the selection parameter in a todo action. Affected: WebCollab before 2.50. Impact (per available data): client-side script execution with ...

CVE-2009-1455

WebCollab before 2.50 (aka Billy Goat) is affected by multiple CSRF vulnerabilities that can allow an attacker to hijack administrator authentication and perform actions such as changing an arbitrary password. The underlying issue is CSRF in the application’s request handling. The NVD entry provi...

CVE-2009-1455

Multiple cross-site request forgery CSRF vulnerabilities in WebCollab before 2.50 aka Billy Goat allow remote attackers to hijack the authentication of administrators for requests that change an arbitrary password or have other unspecified impact...