Approved changes feed: RSS · Atom

cpe:2.3:a:o-dyn:collabtive:1.2:*:*:*:*:*:*:*

part: a version: 1.2 update: *

VendorO Dyn (5d4105a3-70b0-5278-928e-159a33dbc3b5)
ProductCollabtive (6e0cc121-9044-5276-9550-8c8ede89209f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/qnib/collabtive purl2cpe 2026-06-01 10:13:46.237782
pkg:github/javierwilson/collabtive purl2cpe 2026-06-01 10:13:46.237783
pkg:github/philippk-de/collabtive purl2cpe 2026-06-01 10:13:46.237785
pkg:github/turnkeylinux-apps/collabtive purl2cpe 2026-06-01 10:13:46.237786
pkg:sourceforge/collabtive purl2cpe 2026-06-01 10:13:46.237787

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3247 vulnerable 2026-06-08 05:05:31.939502 Details available
Cross-site scripting (XSS) vulnerability in Collabtive 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the desc parameter in an Add project (addpro) action to admin.php.
Published: 2014-05-15T14:00:00.000Z
Updated: 2024-08-06T10:35:57.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3246 vulnerable 2026-06-08 05:05:31.939143 Details available
SQL injection vulnerability in Collabtive 1.2 allows remote authenticated users to execute arbitrary SQL commands via the folder parameter in a fileview_list action to manageajax.php.
Published: 2014-05-13T14:00:00.000Z
Updated: 2024-08-06T10:35:57.082Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.