CVE-2021-3298

概要

参考情報

• collabtive.o-dyn.de/forum/viewforum.php · Vendor Advisory
• exploit-db.com/exploits/49468 · Exploit

collabtive のその他の脆弱性

• CVE-2024-48708中 5.4Collabtive 3.1 is vulnerable to Cross-Site Scripting (XSS) via the name parameter in (a) file tasklist.php under action = add/edit and in (b…
• CVE-2024-48707中 5.4Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under (a) action=add or action=edit within managemilestone…
• CVE-2024-48706中 5.4Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the title parameter with action=add or action=editform within the (a) managem…
• CVE-2024-46240中 4.8Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under action=system and the company/contact parameters und…
• CVE-2020-13655中 6.1An issue was discovered in Collabtive 3.0 and later. managefile.php is vulnerable to XSS: when the action parameter is set to movefile and t…