Deha Berkin Bir

2 exploits Active since Jan 2021

CVE-2021-3298 EXPLOITDB MEDIUM text WORKING POC

Collabtive 3.1 - Authenticated Stored Cross-Site Scripting via Profile Address Field

Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter.

CVSS 5.4

View Code

CVE-2021-44673 EXPLOITDB HIGH text WORKING POC

Croogo 3.0.2 - Remote Code Execution via Admin File Manager Attachments Upload

A Remote Code Execution (RCE) vulnerability exists in Croogo 3.0.2via admin/file-manager/attachments, which lets a malicoius user upload a web shell script.

CVSS 8.8

View Code