CVE-2010-5284

2012-11-2600:00:00

ubuntu.com

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

69.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5
allow remote attackers to inject arbitrary web script or HTML via the (1)
User parameter in the edit user profile feature to manageuser.php, (2) y
parameter in a newcal action to manageajax.php, and the (3) pic parameter
to thumb.php.

OSVersionArchitecturePackageVersionFilename
ubuntu11.10noarchcollabtive< 0.7-1.1UNKNOWN
ubuntu12.04noarchcollabtive< 0.7-1.1UNKNOWN
ubuntu12.10noarchcollabtive< 0.7.6-1UNKNOWN