PT-2013-2008

Name of the Vulnerable Software and Affected Versions activeCollab versions prior to 1.5.2 Description The issue allows remote authenticated users to execute arbitrary PHP code via the messagemessage text parameter to "chat/add message". This is due to improper handling when executing the preg...