high7.5Public exploit code
CVE-2010-4269
SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstart[USERTOID] cookie i…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Collabtive 0.65 - SQL Injection2010-11-01 · webapps · php
Impact
SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstart[USERTOID] cookie in a pull action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| O-Dyn | Collabtive | Version 0.6.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/1011-exploits/collabtive065-sql.txt
- http://www.exploit-db.com/exploits/15381
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62930
- http://packetstormsecurity.org/1011-exploits/collabtive065-sql.txt
- http://www.exploit-db.com/exploits/15381
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62930