CVE-2010-5285

概要

参考情報

• packetstormsecurity.org/1010-exploits/collabtive-xssxsrf.txt
• secunia.com/advisories/41805 · Vendor Advisory
• anatoliasecurity.com/adv/as-adv-2010-003.txt
• exploit-db.com/exploits/15240 · Exploit
• securityfocus.com/bid/44050 · Exploit

collabtive のその他の脆弱性

• CVE-2024-48708中 5.4Collabtive 3.1 is vulnerable to Cross-Site Scripting (XSS) via the name parameter in (a) file tasklist.php under action = add/edit and in (b…
• CVE-2024-48707中 5.4Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under (a) action=add or action=edit within managemilestone…
• CVE-2024-48706中 5.4Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the title parameter with action=add or action=editform within the (a) managem…
• CVE-2024-46240中 4.8Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under action=system and the company/contact parameters und…
• CVE-2021-3298中 5.4Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manage…