Vulnerabilities

TI-2010-00207 CVE-2010-0215 · GHSA-h749-xp26-rq5p

ActiveCollab before 2.3.2 allows remote authenticated users to bypass intended access…

LOW 30

ActiveCollab before 2.3.2 allows remote authenticated users to bypass intended access restrictions, and (1) delete an attachment or (2) subscribe to an object, via a crafted URL.

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01521 Published 2011-01-07 No fix listed CWE-264

TI-2009-01949 CVE-2009-2041 · GHSA-6wm4-qv34-7x5f

Cross-site scripting (XSS) vulnerability in A51 D.O.O.

LOW 22

Cross-site scripting (XSS) vulnerability in A51 D.O.O.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2009-06-12 No fix listed CWE-79

TI-2009-01688 CVE-2009-1773 · GHSA-6f97-98wh-cqm9

activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an…

LOW 27

activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid re_route parameter to the login script, which reveals the installation path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01877 Published 2009-05-22 No fix listed CWE-20

TI-2009-01687 CVE-2009-1772 · GHSA-q6j8-j3p7-rpch

Cross-site scripting (XSS) vulnerability in activeCollab 2.1 Corporate allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in activeCollab 2.1 Corporate allows remote attackers to inject arbitrary web script or HTML via the re_route parameter to the login script.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0164 Published 2009-05-22 No fix listed CWE-79

Vulnerabilities

Filters

ActiveCollab before 2.3.2 allows remote authenticated users to bypass intended access…

Cross-site scripting (XSS) vulnerability in A51 D.O.O.

activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an…

Cross-site scripting (XSS) vulnerability in activeCollab 2.1 Corporate allows remote…