Skip to content
OpenAdvisories

Package · Ubuntu

collabtive

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Medium 5.4
    CVE-2024-48706

    Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the title parameter with action=add or action=editform w…

    collabtive Ubuntu
  • Medium 5.4
    CVE-2024-48707

    Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under (a) action=add or action=edit w…

    collabtive Ubuntu
  • Medium 5.4
    CVE-2024-48708

    Collabtive 3.1 is vulnerable to Cross-Site Scripting (XSS) via the name parameter in (a) file tasklist.php under action…

    collabtive Ubuntu
  • Medium 4.8
    CVE-2024-46240

    Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under action=system and the company/c…

    collabtive Ubuntu
  • High 8.8
    CVE-2022-29221 Public exploit

    PHP Code Injection by malicious block or filename in Smarty

    Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.45 and 4.1.1, template authors could inject php code by choosing a malicious {block} name or {include} file name. Sites t…

    smarty-php smarty smarty3 smarty/smarty Debian Ubuntu Packagist
  • Unscored —
    CVE-2021-3298 Public exploit

    Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit…

    collabtive Ubuntu
  • Unscored —
    CVE-2015-0258

    Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before…

    collabtive Ubuntu