CVE-2010-5284
NONE EPSS 78.1%
Published Nov 26, 201213y ago · Modified Jun 16, 20262w ago
Published Nov 26, 2012 13y ago
Last Modified Jun 16, 2026 2w ago
Description
Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) User parameter in the edit user profile feature to manageuser.php, (2) y parameter in a newcal action to manageajax.php, and the (3) pic parameter to thumb.php.
Threat Intelligence
EPSS Exploit Probability
78.1% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-79 Cross-site Scripting Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| o-dyn | collabtive | 0.6.5 | any |
References 5
- packetstormsecurity.org http://packetstormsecurity.org/1010-exploits/collabtive-xssxsrf.txt
- secunia.com http://secunia.com/advisories/41805
- anatoliasecurity.com http://www.anatoliasecurity.com/adv/as-adv-2010-003.txt
- exploit-db.com http://www.exploit-db.com/exploits/15240
- securityfocus.com http://www.securityfocus.com/bid/44050
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.