CVE-2009-1773
activeCollab 2.1 Corporate - Information Disclosure via Invalid re_route Parameter
Title source: llmDescription
activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid re_route parameter to the login script, which reveals the installation path in an error message.
References (3)
Core 3
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/35079
Various Sources x_refsource_misc
http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/35022
Scores
EPSS
0.0188
EPSS Percentile
77.0%
Details
CWE
CWE-20
Status
published
Products (1)
activecollab/activecollab
2.1.0
Published
May 22, 2009
Tracked Since
Feb 18, 2026