Skip to content
OpenAdvisories

Package · Ubuntu

collabtive

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2022-29221 Public exploit

    PHP Code Injection by malicious block or filename in Smarty

    Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.45 and 4.1.1, template authors could inject php code by choosing a malicious {block} name or {include} file name. Sites t…

    smarty-php smarty smarty3 smarty/smarty Debian Ubuntu Packagist
  • Unscored —
    CVE-2021-3298 Public exploit

    Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit…

    collabtive Ubuntu