CVE-2010-5284

Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) User parameter in the edit user profile feature to manageuser.php, (2) y parameter in a newcal action to manageajax.php, and the (3) pic parameter to thumb.php.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.98% chance of exploitation in the next 30 days, 79th percentile

Published

2012-11-26

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/15240

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/15240

References

• CVE Record
• NVD entry

Related

• CVE-2010-5281
• CVE-2010-5285
• CVE-2010-5280
• CVE-2010-5286
• CVE-2010-5278
• CVE-2010-5287