CVE-2009-1772

概要

参考情報

• pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html
• secunia.com/advisories/35079 · Vendor Advisory
• securityfocus.com/bid/35022

activecollab のその他の脆弱性

• CVE-2010-0215中 6.0ActiveCollab before 2.3.2 allows remote authenticated users to bypass intended access restrictions, and (1) delete an attachment or (2) subs…
• CVE-2009-2041中 4.3Cross-site scripting (XSS) vulnerability in A51 D.O.O. activeCollab 0.7.1 allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2009-1773中 5.0activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid re_route parameter to the login script, wh…