O-dyn

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 16
    Known Exploited: 0
    1
    Critical Level Threats
    2
    High Level Threats
    13
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2024-48708

    Collabtive 3.1 is vulnerable to Cross-Site Scripting (XSS) via the name parameter in (a) file tasklist.php under action = add/edit and in (b) file admin.php under action = adduser/edituser.

    Last Modified: Oct 25, 2024
    Published: Oct 22, 2024

    CVE-2024-46240

    Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under action=system and the company/contact parameters under action=addcust within admin.php file.

    Last Modified: Oct 25, 2024
    Published: Oct 22, 2024

    CVE-2024-48706

    Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the title parameter with action=add or action=editform within the (a) managemessage.php file and (b) managetask.php file respectively.

    Last Modified: Mar 25, 2025
    Published: Oct 22, 2024

    CVE-2024-48707

    Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under (a) action=add or action=edit within managemilestone.php file and (b) action=addpro within admin.php file.

    Last Modified: Oct 25, 2024
    Published: Oct 22, 2024

    CVE-2021-3298

    Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter.

    Last Modified: Nov 21, 2024
    Published: Jan 29, 2021
    Items Per Page
    O-Dyn Vulnerabilities & Security CVEs | CVE-DB