CVEvulnerability
CVE-2008-6946
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-08-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in manageproject.php in Collabtive 0.4.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via the project Name, which is not properly handled when the administrator performs an editform action, related to admin.php.
Affected configurations
• collabtive collabtive 0.4.8
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.securityfocus.com/archive/1/498186/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32229 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46496 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7076 www.exploit-db.com
- http://www.securityfocus.com/archive/1/498186/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32229 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46496 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7076 www.exploit-db.com