https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T07:03:32.028356+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2015-0258 CVE-2015-0258 2026-10-07T07:03:32.031443+00:00

Affected: Collabtive

Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a (1) .php3, (2) .php4, (3) .php5, or (4) .phtml extension.

 https://vulnerability.circl.lu/vuln/usn-4590-1 USN-4590-1 — collabtive vulnerability 2026-10-07T07:03:32.031526+00:00

Affected: Ubuntu:16.04:LTS: collabtive

It was discovered that Collabtive did not properly validate avatar image file uploads. An authenticated user could exploit this with a crafted file to cause Collabtive to execute arbitrary code. (CVE-2015-0258)