EUVD-2010-4242

Malware in sbrugna...

Sql injection

SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstartUSERTOID cookie in a pull action...

CVE-2010-4269

CVE-2010-4269 affects Collabtive 0.65 (managechat.php): a SQL Injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the chatstart[USERTOID] cookie in a pull action. OpenVAS entries confirm Collabtive "managechat.php" SQL Injection vulnerability; no product/ven...

Collabtive 0.65 - Multiple Vulnerabilities

ANATOLIA SECURITY ADVISORY ------------------------------------ ADVISORY INFO + Title: Collabtive Multiple Vulnerabilities + Advisory URL: http://www.anatoliasecurity.com/adv/as-adv-2010-003.txt + Advisory ID: 2010-003 + Version: 0.65 + Date: 12/10/2010 + Impact: Gaining Administrative Privileges...