Skip to content
Noroxi

o-dyn records

16 published records for vendor o-dyn.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
6.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 21
  4. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

16 records
  • CVE-2013-5027
    39Monitor

    Collabtive 1.0 has incorrect access control

    CriticalCVSS 9.8No exploitEPSS 1%

    o-dyn · collabtiveDec 27, 2019

  • CVE-2015-0258
    36Monitor

    Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote aut

    HighCVSS 8.8No exploitEPSS 3%

    o-dyn · collabtiveFeb 17, 2020

  • CVE-2010-4269
    30Monitor

    SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstart

    HighCVSS 7.5Proof of conceptEPSS 1%

    o-dyn · collabtiveNov 16, 2010

  • CVE-2013-6872
    27Monitor

    SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated users to execute arbitrary SQL com

    MediumCVSS 6.5Proof of conceptEPSS 2%

    o-dyn · collabtiveJan 21, 2014

  • CVE-2010-5285
    27Monitor

    Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the authentication of adm

    MediumCVSS 6.8Proof of conceptEPSS 1%

    o-dyn · collabtiveNov 26, 2012

  • CVE-2012-2670
    26Monitor

    manageuser.php in Collabtive before 0.7.6 allows remote authenticated users, and possibly unauthenticated attackers, to bypass intended acce

    MediumCVSS 6.5No exploitEPSS 1%

    o-dyn · collabtiveJun 16, 2012

  • CVE-2014-3246
    26Monitor

    SQL injection vulnerability in Collabtive 1.2 allows remote authenticated users to execute arbitrary SQL commands via the folder parameter i

    MediumCVSS 6.5Proof of conceptEPSS 1%

    o-dyn · collabtiveMay 13, 2014

  • CVE-2020-13655
    24Monitor

    An issue was discovered in Collabtive 3.0 and later.

    MediumCVSS 6.1No exploitEPSS 0%

    o-dyn · collabtiveAug 31, 2020

  • CVE-2021-3298
    22Monitor

    Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manage

    MediumCVSS 5.4Proof of conceptEPSS 2%

    o-dyn · collabtiveJan 29, 2021

  • CVE-2019-8935
    21Monitor

    Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter.

    MediumCVSS 5.4No exploitEPSS 0%

    o-dyn · collabtiveFeb 19, 2019

  • CVE-2024-48706
    21Monitor

    Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the title parameter with action=add or action=editform within the (a) managem

    MediumCVSS 5.4No exploitEPSS 0%

    o-dyn · collabtiveOct 22, 2024

  • CVE-2024-48707
    21Monitor

    Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under (a) action=add or action=edit within managemilestone

    MediumCVSS 5.4No exploitEPSS 0%

    o-dyn · collabtiveOct 22, 2024

  • CVE-2024-48708
    21Monitor

    Collabtive 3.1 is vulnerable to Cross-Site Scripting (XSS) via the name parameter in (a) file tasklist.php under action = add/edit and in (b

    MediumCVSS 5.4No exploitEPSS 0%

    o-dyn · collabtiveOct 22, 2024

  • CVE-2024-46240
    19Monitor

    Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under action=system and the company/contact parameters und

    MediumCVSS 4.8No exploitEPSS 0%

    o-dyn · collabtiveOct 22, 2024

  • CVE-2010-5284
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via th

    MediumCVSS 4.3Proof of conceptEPSS 1%

    o-dyn · collabtiveNov 26, 2012

  • CVE-2014-3247
    17Monitor

    Cross-site scripting (XSS) vulnerability in Collabtive 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the

    MediumCVSS 4.3Proof of conceptEPSS 1%

    o-dyn · collabtiveMay 15, 2014