CVE-2012-6554
N/A
N/A
Summary
functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute arbitrary PHP code via the message[message_text] parameter to chat/add_messag, which is not properly handled when executing the preg_replace function with the eval switch.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.exploit-db.com/exploits/18898
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75741
- http://osvdb.org/81966
- http://www.securityfocus.com/bid/53624
- http://www.activecollab.com/downloads/category/4/package/62/releases
- http://secunia.com/advisories/49246
References
- http://www.exploit-db.com/exploits/18898
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75741
- http://osvdb.org/81966
- http://www.securityfocus.com/bid/53624
- http://www.activecollab.com/downloads/category/4/package/62/releases
- http://secunia.com/advisories/49246
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.