Fwd: Re: Collabtive multiple vulnerabilities.

[Enrico Cinquini <enrico.cinquini () gmail com>]

I wrote about shell upload that it was found in older releases, bit it is
still present.. Your link talks about versions <= 0.7.6...

Actually there si the 1.0 release.

About Account deletion.. Dunno, i wrote to the developer the same day
(21/06) and the blog published the following day (22).

Regards
---------- Messaggio inoltrato ----------
Da: "security curmudgeon" <jericho () attrition org>
Data: 22/lug/2013 23:00
Oggetto: Re: Collabtive multiple vulnerabilities.
A: <full-disclosure () lists grok org uk>
Cc: "Enrico Cinquini" <enrico.cinquini () gmail com>


http://seclists.org/**fulldisclosure/2013/Jul/195<http://seclists.org/fulldisclosure/2013/Jul/195>

: - Release date: July 22th, 2013
: - Discovered by: Enrico Cinquini

: 1) UPLOAD PHP FILE INSIDE AVATAR:

Disclosed 2012-06-04 by Mark Hoopes (OSVDB 82811).
http://xync.org/2012/06/04/**Arbitrary-File-Upload-in-**Collabtive.html<http://xync.org/2012/06/04/Arbitrary-File-Upload-in-Collabtive.html>

: 2) ACCOUNT DELETION

Disclosed 2013-06-21 by the vendor, and referenced by 'drone' in his SQLi
advisory for Collabtive (OSVDB 94558):
https://github.com/philippK-**de/Collabtive/commit/**
82943ad58e5572ccef54d709220c4c**411e80049b<https://github.com/philippK-de/Collabtive/commit/82943ad58e5572ccef54d709220c4c411e80049b>
http://forelsec.blogspot.com/**2013/06/collabtive-10-sqli.**html<http://forelsec.blogspot.com/2013/06/collabtive-10-sqli.html>


At least the XSS look new!

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/