CVE-2010-5284

Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) User parameter in the edit user profile feature to manageuser.php, (2) y parameter in a newcal action to manageajax.php, and the (3) pic parameter to thumb.php.

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.98% chance of exploitation in the next 30 days, 80th percentile

Published

2012-11-26

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/15240

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/15240

Security advisories

• http://secunia.com/advisories/41805
• http://www.securityfocus.com/bid/44050

References

• CVE Record
• NVD entry