Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

o-dyn vulnerabilities and exploits

(subscribe to this query)
655
VMScore
CVE-2013-6872
SQL injection vulnerability in managetimetracker.php in Collabtive prior to 1.2 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a projectpdf action.
O-dyn Collabtive 0.6.2O-dyn Collabtive 0.6.1O-dyn Collabtive 0.6O-dyn Collabtive 0.5.5O-dyn Collabtive 0.1O-dyn CollabtiveO-dyn Collabtive 1.0O-dyn Collabtive 0.7.6O-dyn Collabtive 0.7.5O-dyn Collabtive 0.4.7O-dyn Collabtive 0.4.6O-dyn Collabtive 0.4.5O-dyn Collabtive 0.4O-dyn Collabtive 0.3.6O-dyn Collabtive 0.6.5O-dyn Collabtive 0.6.3O-dyn Collabtive 0.5.1O-dyn Collabtive 0.4.9O-dyn Collabtive 0.3.5O-dyn Collabtive 0.2.5O-dyn Collabtive 0.7O-dyn Collabtive 0.6.4
578
VMScore
CVE-2012-2670
manageuser.php in Collabtive prior to 0.7.6 allows remote authenticated users, and possibly unauthenticated attackers, to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg, then ...
O-dyn Collabtive 0.7O-dyn Collabtive 0.6.5O-dyn Collabtive 0.6.4O-dyn Collabtive
383
VMScore
CVE-2020-13655
An issue exists in Collabtive 3.0 and later. managefile.php is vulnerable to XSS: when the action parameter is set to movefile and the id parameter corresponds to a project the current user has access to, the file and target parameters are reflected.
O-dyn Collabtive
668
VMScore
CVE-2013-5027
Collabtive 1.0 has incorrect access control
O-dyn Collabtive 1.0
312
VMScore
CVE-2019-8935
Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter.
O-dyn Collabtive 3.1
655
VMScore
CVE-2014-3246
SQL injection vulnerability in Collabtive 1.2 allows remote authenticated users to execute arbitrary SQL commands via the folder parameter in a fileview_list action to manageajax.php.
O-dyn Collabtive 1.2
685
VMScore
CVE-2010-5285
Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote malicious users to hijack the authentication of administrators for requests that add administrative users via the edituser action.
O-dyn Collabtive 0.6.5
312
VMScore
CVE-2021-3298
Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter.
O-dyn Collabtive 3.1
435
VMScore
CVE-2014-3247
Cross-site scripting (XSS) vulnerability in Collabtive 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the desc parameter in an Add project (addpro) action to admin.php.
O-dyn Collabtive 1.2
435
VMScore
CVE-2010-5284
Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote malicious users to inject arbitrary web script or HTML via the (1) User parameter in the edit user profile feature to manageuser.php, (2) y parameter in a newcal action to manageajax.php, and the...
O-dyn Collabtive 0.6.5
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook