CVE-2014-3247
NONE EPSS 74.9%
Published May 15, 201412y ago · Modified Jun 17, 20262w ago
Published May 15, 2014 12y ago
Last Modified Jun 17, 2026 2w ago
Description
Cross-site scripting (XSS) vulnerability in Collabtive 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the desc parameter in an Add project (addpro) action to admin.php.
Threat Intelligence
EPSS Exploit Probability
74.9% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-79 Cross-site Scripting Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| o-dyn | collabtive | 1.2 | any |
References 2
- exploit-db.com http://www.exploit-db.com/exploits/33250
- securityfocus.com http://www.securityfocus.com/bid/67343
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.