Sql injection

SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstartUSERTOID cookie in a pull action...

CVE-2010-4269: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstartUSERTOID cookie in a pull action...

PT-2010-5387

Name of the Vulnerable Software and Affected Versions Collabtive version 0.65 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the chatstartUSERTOID cookie in a "pull" action on the managechat.php file. Recommendations For Collabtive version...