RSS   Vulnerabilities for 'Activecollab'   RSS

2009-06-12
 
CVE-2009-2041

CWE-79
 

 
Cross-site scripting (XSS) vulnerability in A51 D.O.O. activeCollab 0.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1772.

 
2009-05-22
 
CVE-2009-1773

CWE-20
 

 
activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid re_route parameter to the login script, which reveals the installation path in an error message.

 
 
CVE-2009-1772

CWE-79
 

 
Cross-site scripting (XSS) vulnerability in activeCollab 2.1 Corporate allows remote attackers to inject arbitrary web script or HTML via the re_route parameter to the login script.

 


Copyright 2024, cxsecurity.com

 

Back to Top