GCVE - cpe:2.3:a:atutor:acollab:1.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:atutor:acollab:1.2:*:*:*:*:*:*:*

part: a version: 1.2 update: *

Vendor	Atutor (`69bf6287-fa98-5b8e-aa4b-51a5abfbd635`)
Product	Acollab (`b39b5f36-8c1c-5214-813f-fc6f25bb4a48`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-4945`	vulnerable	2026-06-08 04:51:50.497174	Details available AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via requests to index.php. Published: 2010-07-22T10:00:00.000Z Updated: 2024-08-07T07:24:53.353Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/503855/100/0/threaded http://www.securityfocus.com/archive/1/503911/100/0/threaded http://forum.intern0t.net/intern0t-advisories/1049-intern0t-adpeeps-8-5d1-cross-site-scripting-html-injection-vulnerabilities.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4944`	vulnerable	2026-06-08 04:51:50.496892	Details available Multiple cross-site scripting (XSS) vulnerabilities in ATRC ACollab 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) address parameter to profile.php or the (2) description parameter to events/add_event.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2010-07-22T10:00:00.000Z Updated: 2024-08-07T07:24:53.391Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/50834 http://secunia.com/advisories/35173 http://www.osvdb.org/54799 http://www.osvdb.org/54800	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4942`	vulnerable	2026-06-08 04:51:50.496275	Details available Cross-site request forgery (CSRF) vulnerability in ACollab 1.2 allows remote attackers to hijack the authentication of arbitrary users for requests that add personal agenda items. Published: 2010-07-22T10:00:00.000Z Updated: 2024-08-07T07:24:53.748Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/50835 http://secunia.com/advisories/35173 http://holisticinfosec.org/content/view/115/45/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4941`	vulnerable	2026-06-08 04:51:50.495898	Details available Cross-site scripting (XSS) vulnerability in sign_in.php in ATRC ACollab 1.2 allows remote attackers to inject arbitrary web script or HTML via the f parameter. Published: 2010-07-22T10:00:00.000Z Updated: 2024-08-07T07:24:53.704Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/50833 http://www.osvdb.org/54798 http://secunia.com/advisories/35173 http://holisticinfosec.org/content/view/115/45/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.