PT-2014-5155

Name of the Vulnerable Software and Affected Versions Collabtive version 1.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved by exploiting the folder parameter in a "fileview list" action to "manageajax.php" API endpoint. Recommendations...