CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-0258

Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a (1) .php3, (2) .php4, (3) .php5, or (4) .phtml extension.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.135

EPSS Ranking 93.8%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2015-0258

O-Dyn » Collabtive » Version: 0.1

cpe:2.3:a:o-dyn:collabtive:0.1
O-Dyn » Collabtive » Version: 0.2

cpe:2.3:a:o-dyn:collabtive:0.2
O-Dyn » Collabtive » Version: 0.2.5

cpe:2.3:a:o-dyn:collabtive:0.2.5
O-Dyn » Collabtive » Version: 0.3

cpe:2.3:a:o-dyn:collabtive:0.3
O-Dyn » Collabtive » Version: 0.3.5

cpe:2.3:a:o-dyn:collabtive:0.3.5
O-Dyn » Collabtive » Version: 0.3.6

cpe:2.3:a:o-dyn:collabtive:0.3.6
O-Dyn » Collabtive » Version: 0.4

cpe:2.3:a:o-dyn:collabtive:0.4
O-Dyn » Collabtive » Version: 0.4.5

cpe:2.3:a:o-dyn:collabtive:0.4.5
O-Dyn » Collabtive » Version: 0.4.6

cpe:2.3:a:o-dyn:collabtive:0.4.6
O-Dyn » Collabtive » Version: 0.4.7

cpe:2.3:a:o-dyn:collabtive:0.4.7
O-Dyn » Collabtive » Version: 0.4.8

cpe:2.3:a:o-dyn:collabtive:0.4.8
O-Dyn » Collabtive » Version: 0.4.9

cpe:2.3:a:o-dyn:collabtive:0.4.9
O-Dyn » Collabtive » Version: 0.4.9.1

cpe:2.3:a:o-dyn:collabtive:0.4.9.1
O-Dyn » Collabtive » Version: 0.5.1

cpe:2.3:a:o-dyn:collabtive:0.5.1
O-Dyn » Collabtive » Version: 0.5.5

cpe:2.3:a:o-dyn:collabtive:0.5.5
O-Dyn » Collabtive » Version: 0.6

cpe:2.3:a:o-dyn:collabtive:0.6
O-Dyn » Collabtive » Version: 0.6.1

cpe:2.3:a:o-dyn:collabtive:0.6.1
O-Dyn » Collabtive » Version: 0.6.2

cpe:2.3:a:o-dyn:collabtive:0.6.2
O-Dyn » Collabtive » Version: 0.6.3

cpe:2.3:a:o-dyn:collabtive:0.6.3
O-Dyn » Collabtive » Version: 0.6.4

cpe:2.3:a:o-dyn:collabtive:0.6.4
O-Dyn » Collabtive » Version: 0.6.5

cpe:2.3:a:o-dyn:collabtive:0.6.5
O-Dyn » Collabtive » Version: 0.7

cpe:2.3:a:o-dyn:collabtive:0.7
O-Dyn » Collabtive » Version: 0.7.5

cpe:2.3:a:o-dyn:collabtive:0.7.5
O-Dyn » Collabtive » Version: 0.7.6

cpe:2.3:a:o-dyn:collabtive:0.7.6
O-Dyn » Collabtive » Version: 1.0

cpe:2.3:a:o-dyn:collabtive:1.0
O-Dyn » Collabtive » Version: 1.1

cpe:2.3:a:o-dyn:collabtive:1.1
O-Dyn » Collabtive » Version: 1.2

cpe:2.3:a:o-dyn:collabtive:1.2
O-Dyn » Collabtive » Version: 2.0

cpe:2.3:a:o-dyn:collabtive:2.0
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-0258

Products

Pricing

Contact Us