Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrepresent the type and name of a file via modified doc_ext and id parameters, which might trick a user into downloading dangerous or unexpected content.
2006-01-11T21:03:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 4.0 (MEDIUM)
AV:N/AC:L/Au:S/C:N/I:P/A:N
8.0
2.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | hummingbird | enterprise_collaboration | ≤ 5.21 | Yes |
Application | hummingbird | enterprise_collaboration | 5.2 | Yes |