CVE-2008-6946 Cross-site scripting (XSS) vulnerability in manageproject.php in Collabtive 0.4.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via the project Name, which is not proper...
MediumCVSS 4.3
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in manageproject.php in Collabtive 0.4.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via the project Name, which is not properly handled when the administrator performs an editform action, related to admin.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| collabtive | = 0.4.8 | No fix listed |
References
- 20081110 Collabtive 0.4.8 Multiple Vulnerabilities mailing-list
- 32229 vdb-entry
- collabtive-admin-xss(46496) vdb-entry
- 7076 exploit