Description

SQL injection vulnerability in Collabtive 1.2 allows remote authenticated users to execute arbitrary SQL commands via the folder parameter in a fileview_list action to manageajax.php.

Remediation

References

CVE-2014-3246

Related Vulnerabilities

Joomla! Core 1.6.x Cross-Site Scripting (1.6.0 - 1.6.3)

Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-29052)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4608)

Magento Improper Authorization Vulnerability (CVE-2021-28563)

Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-1000356)

Severity

Medium

Classification

CVE-2014-3246 CWE-138

Tags

Missing Update Known Vulnerabilities