CVE-2014-3247

Cross-site scripting (XSS) vulnerability in Collabtive 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the desc parameter in an Add project (addpro) action to admin.php.
Configurations

Configuration 1 (hide)

cpe:2.3:a:o-dyn:collabtive:1.2:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-05-15 14:55

Updated : 2024-02-04 18:35


NVD link : CVE-2014-3247

Mitre link : CVE-2014-3247

CVE.ORG link : CVE-2014-3247


JSON object : View

Products Affected

o-dyn

  • collabtive
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')