packetstormsecurity.org
http://packetstormsecurity.org/1010-exploits/collabtive-xssxsrf.txt CVE-2010-5285
Collabtive 0.65 - Multiple Vulnerabilities
Record summary
CVE-2010-5285 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.
Description
Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the authentication of administrators for requests that add administrative users via the edituser action.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBCollabtive 0.65 - Multiple VulnerabilitiesExploitDB exploitby Anatolia SecurityNot analyzed1 file
References
641805Third-party advisory
http://secunia.com/advisories/41805 anatoliasecurity.com
http://www.anatoliasecurity.com/adv/as-adv-2010-003.txt 15240exploit
http://www.exploit-db.com/exploits/15240 44050vdb entry
http://www.securityfocus.com/bid/44050 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2010-5285