https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 07:03:30 +0000 https://vulnerability.circl.lu/vuln/cve-2015-0258 <p><strong>Affected:</strong> Collabtive</p> <p>Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a (1) .php3, (2) .php4, (3) .php5, or (4) .phtml extension.</p> <p><strong>Affected:</strong> Collabtive</p> <p>Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a (1) .php3, (2) .php4, (3) .php5, or (4) .phtml extension.</p> https://vulnerability.circl.lu/vuln/cve-2015-0258 https://vulnerability.circl.lu/vuln/usn-4590-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: collabtive</p> <p>It was discovered that Collabtive did not properly validate avatar image file uploads. An authenticated user could exploit this with a crafted file to cause Collabtive to execute arbitrary code. (CVE-2015-0258)</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: collabtive</p> <p>It was discovered that Collabtive did not properly validate avatar image file uploads. An authenticated user could exploit this with a crafted file to cause Collabtive to execute arbitrary code. (CVE-2015-0258)</p> https://vulnerability.circl.lu/vuln/usn-4590-1