CVE

Id
47868  
CVE No.
CVE-2010-5284  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) User parameter in the edit user profile feature to manageuser.php, (2) y parameter in a newcal action to manageajax.php, and the (3) pic parameter to thumb.php.  
Phase
Assigned (20121126)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
520396 47868 CVE-2010-5284 EXPLOIT-DB:15240  View
520397 47868 CVE-2010-5284 URL:http://www.exploit-db.com/exploits/15240  View
520398 47868 CVE-2010-5284 MISC:http://packetstormsecurity.org/1010-exploits/collabtive-xssxsrf.txt  View
520399 47868 CVE-2010-5284 MISC:http://www.anatoliasecurity.com/adv/as-adv-2010-003.txt  View
520400 47868 CVE-2010-5284 BID:44050  View
520401 47868 CVE-2010-5284 URL:http://www.securityfocus.com/bid/44050  View
520402 47868 CVE-2010-5284 SECUNIA:41805  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39865 JVNDB-2010-005650 EDItran Communications Platform の editcp におけるバッファオーバーフローの脆弱性 EDItran Communications Platform の editcp の lsConnectionCached 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2010-5288 47868 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005650.html  View