CVE-2008-6946

Cross-site scripting (XSS) vulnerability in manageproject.php in Collabtive 0.4.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via the project Name, which is not properly handled when the administrator performs an editform action, related to admin.php.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

3.44% chance of exploitation in the next 30 days, 88th percentile

Published

2009-08-12

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/7076

References

• CVE Record
• NVD entry

Related

• CVE-2008-6944
• CVE-2008-6947
• CVE-2008-6943
• CVE-2008-6948
• CVE-2008-6942
• CVE-2008-6949