CVE-2010-5284 | BDVDB-2026-53631 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) User parameter in the edit user profile feature to manageuser.php, (2) y parameter in a newcal action to manageajax.php, and the (3) pic parameter to thumb.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/44050
http://www.exploit-db.com/exploits/15240
http://packetstormsecurity.org/1010-exploits/collabtive-xssxsrf.txt
http://secunia.com/advisories/41805
http://www.anatoliasecurity.com/adv/as-adv-2010-003.txt

Exploit#

http://www.exploit-db.com/exploits/15240

History#

Version 12012-11-26Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.