Vulnerabilities

TI-2013-02331 CVE-2013-2652 · GHSA-3hrx-rh52-3vwx

CRLF injection vulnerability in help/help_language.php in WebCollab 3.30 and earlier…

LOW 25

CRLF injection vulnerability in help/help_language.php in WebCollab 3.30 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the item parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02528 Published 2013-11-02 No fix listed CWE-79

TI-2009-01379 CVE-2009-1455 · GHSA-r2qg-qmw9-cq46

Multiple cross-site request forgery (CSRF) vulnerabilities in WebCollab before 2.50 (aka…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in WebCollab before 2.50 (aka Billy Goat) allow remote attackers to hijack the authentication of administrators for requests that change an arbitrary password or…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00599 Published 2009-04-28 No fix listed CWE-352

TI-2009-01378 CVE-2009-1454 · GHSA-g37c-96jr-qv9c

Cross-site scripting (XSS) vulnerability in tasks.php in WebCollab before 2.50 (aka Billy…

LOW 23

Cross-site scripting (XSS) vulnerability in tasks.php in WebCollab before 2.50 (aka Billy Goat) allows remote attackers to inject arbitrary web script or HTML via the selection parameter in a todo action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01223 Published 2009-04-28 No fix listed CWE-79

Vulnerabilities

Filters

CRLF injection vulnerability in help/help_language.php in WebCollab 3.30 and earlier…

Multiple cross-site request forgery (CSRF) vulnerabilities in WebCollab before 2.50 (aka…

Cross-site scripting (XSS) vulnerability in tasks.php in WebCollab before 2.50 (aka Billy…