full-disclosure - Fwd: Re: Collabtive multiple vulnerabilities.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CAPGBzUuuuSE3FuWSZvfgCaxh4YeQ7m3Hk3-OZr8S+3KHMcJLGA@mail.gmail.com>
Date: Mon, 22 Jul 2013 23:11:22 +0200
From: Enrico Cinquini <enrico.cinquini@...il.com>
To: full-disclosure@...ts.grok.org.uk
Cc: jericho@...rition.org
Subject: Fwd: Re: Collabtive multiple vulnerabilities.

I wrote about shell upload that it was found in older releases, bit it is
still present.. Your link talks about versions <= 0.7.6...

Actually there si the 1.0 release.

About Account deletion.. Dunno, i wrote to the developer the same day
(21/06) and the blog published the following day (22).

Regards
---------- Messaggio inoltrato ----------
Da: "security curmudgeon" <jericho@...rition.org>
Data: 22/lug/2013 23:00
Oggetto: Re: Collabtive multiple vulnerabilities.
A: <full-disclosure@...ts.grok.org.uk>
Cc: "Enrico Cinquini" <enrico.cinquini@...il.com>

http://seclists.org/**fulldisclosure/2013/Jul/195<http://seclists.org/fulldisclosure/2013/Jul/195>

: - Release date: July 22th, 2013
: - Discovered by: Enrico Cinquini

: 1) UPLOAD PHP FILE INSIDE AVATAR:

Disclosed 2012-06-04 by Mark Hoopes (OSVDB 82811).
http://xync.org/2012/06/04/**Arbitrary-File-Upload-in-**Collabtive.html<http://xync.org/2012/06/04/Arbitrary-File-Upload-in-Collabtive.html>

: 2) ACCOUNT DELETION

Disclosed 2013-06-21 by the vendor, and referenced by 'drone' in his SQLi
advisory for Collabtive (OSVDB 94558):
https://github.com/philippK-**de/Collabtive/commit/**
82943ad58e5572ccef54d709220c4c**411e80049b<https://github.com/philippK-de/Collabtive/commit/82943ad58e5572ccef54d709220c4c411e80049b>
http://forelsec.blogspot.com/**2013/06/collabtive-10-sqli.**html<http://forelsec.blogspot.com/2013/06/collabtive-10-sqli.html>

At least the XSS look new!

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/