Vulnerability Details CVE-2009-1772
Cross-site scripting (XSS) vulnerability in activeCollab 2.1 Corporate allows remote attackers to inject arbitrary web script or HTML via the re_route parameter to the login script.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.6%
CVSS Severity
CVSS v2 Score 4.3
References
- http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html
- http://secunia.com/advisories/35079
- http://www.securityfocus.com/bid/35022
- http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html
- http://secunia.com/advisories/35079
- http://www.securityfocus.com/bid/35022
Products affected by CVE-2009-1772
-
cpe:2.3:a:activecollab:activecollab:2.1.0