33250exploit
http://www.exploit-db.com/exploits/33250 CVE-2014-3247
Collabtive 1.2 - Persistent Cross-Site Scripting
Record summary
CVE-2014-3247 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in Collabtive 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the desc parameter in an Add project (addpro) action to admin.php.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBCollabtive 1.2 - Persistent Cross-Site ScriptingExploitDB exploitby Deepak RathoreNot analyzed1 file
References
367343vdb entry
http://www.securityfocus.com/bid/67343 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2014-3247